Fix vulnerable dependency