xmldom dependency vulnerability issue

[yifengren]

tried to install from "sudo npm install -g @oracle/ojet-cli", but showed the vulnerability issue

xmldom *
Severity: moderate
Misinterpretation of malicious XML input - GHSA-5fg8-2547-mr8q
fix available via npm audit fix --force
Will install @oracle/ojet-cli@6.2.0, which is a breaking change
node_modules/xmldom
@oracle/ojet-cli >=7.0.0
Depends on vulnerable versions of xmldom
node_modules/@oracle/ojet-cli

checked the source code here,https://github.com/oracle/ojet-cli/blob/master/package.json, it points to the old version of xmldom 0.5.0

you may want to switch to the new version of xmldom named @xmldom/xmldom (>=0.7.0)