@thi.ng/egf is an Extensible Graph Format
Affected versions of this package are vulnerable to Arbitrary Code Execution via
gpg-tagged property values (only if
decrypt: true option is enabled). By default the EGF parse functions do not attempt to decrypt values (since GPG is only available in a non-browser env).
@thi.ng/egf to version 0.4.0 or higher.