This affects the package gsap before 3.6.0.CreditsAlessio Della Libera (d3lla)Referenceshttps://snyk.io/vuln/SNYK-JS-GSAP-1054614https://github.com/greensock/GSAP/blob/master/src/gsap-core.js%23L147