High severity security flaw in JSONPath Plus allows Remote Code Execution - please update dependency 