As the title mentions, this package depends on a vulnerable package that has a pending PR to be merged and a minor version to be bumped. The PR is the following: https://github.com/gammasoft/utils/pull/6