sharp v < 0.35.0 security vulnerability breaking changes if updated?

[eclecticpassions]

I am on the latest Quartz v5 (just ran npm quartz upgrade) and saw the node_module sharp is vulnerable with "high serverity". Can the upstream Quartz dependencies be updates so that users can npm audit fix without --force? Thanks a lot.