Security vulnerability affects the local-static-provisioner package. This issue is resolved in later releases. See references for vulnerability details.