All the vulnerabilities related to the version 1.4.0 of the package
Regular Expression Denial Of Service in uri-js
Affected versions of uri-js is susceptible to a regular expression denial of service vulnerability when user input is sent to the .parse() method.
Update to v3.0.0 or later.