Here the github dependabot(the bot which checks for dependencies that may now have security updates) is flagging an indirect dependency as some kind of vulnerability.

Ideally you dont have to do anything as this is an indirect dependency of a direct dependency that might exist in your widgets package.json file.

Which widget is this? perhaps i can take a look at the source code and would kind of suggest better