This package has known vulnerabilities, please investigate and fix if possible:
  CVE-2020-8896