https://advisories.gitlab.com/pkg/npm/decal/CVE-2020-28449/