About dependency vulnerabilities

[Tychus]

I was notified while trying mend/whitesource about this GHSA-6qmf-mmc7-6c2p. Came here to open a ticket and maybe work on a PR. I don't see any similar PRs or dependabot activity for a while. My question is how is this handled in nuke ? Should i proceed with creating a ticket and a PR fix ? Please let me know how you handle/want to handle this kind of work.