In Your page-lock.json is at line 140 the node_modules brace-expansion (brace-expansion-1.1.11.) It has minor vulnerabilities https://security.snyk.io/package/npm/brace-expansion ( also github Dependabot told me : Upgrade to ~> 2.0.2 )