Known moderate severity security vulnerability detected in ejs < 2.5.5 defined in package.json. package.json update suggested: ejs ~> 2.5.5.