Js scss-tokenizer is a 3th party library vulnerable in sonarqube

[sasamaniegoQA]

I'd analyze a project with sonarqube and dependency-check and the result was the library scss-tokenizer V 0.4.3 has a vulnerability. Will you release a new version without this vulnerability?