chore(security): address GHSA-5p4m-2wfm-xmqj (#4294)