Security alert email from GitHub

Hello, from time to time I receive security advisory emails from GitHub on this repo. An example is shown below. To my uneducated eye this one looks serious. Is there any action required, specifically any action from the OpenHW staff.