Tiny-lr 1.1.1 depends on an old version of faye-websocket which has security issues. Full details: https://github.com/advisories/GHSA-2v5c-755p-p4gv