Dependency problem: 3 vulnerabilities (2 moderate, 1 critical)

[amochkin]

Dependency warning upon installation of passport-twitter.

Expected behavior

No warnings.

Actual behavior

$ npm i passport-twitter
3 vulnerabilities (2 moderate, 1 critical)

$ npm audit
node_modules/xmldom
  xtraverse  *
  Depends on vulnerable versions of xmldom
  node_modules/xtraverse
    passport-twitter  >=1.0.0
    Depends on vulnerable versions of xtraverse
    node_modules/passport-twitter

Steps to reproduce

$ npm i passport-twitter

Environment

• Operating System: MacOS
• Node version: 20
• passport version: 0.6.0
• passport-twitter version: 1.0.4

[amochkin]

Need to bump those deps. Thanks!

[Squishey]

any solution about those 3 vulnerabilites? One of those being critical!