openframe (>=0.1.6, <=0.1.33) potentially affected by CVE-2016-10616 via openframe-image (0.1.8)

openframe-image NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on openframe-image and may be impacted: - openframe =0.1.6, =0.1.33 Source cves: CVE-2016-10616 Source advisory: OSV:GHSA-MGR2-3MPV-43GC...