sharp v < 0.35.0 security vulnerability breaking changes if updated?

I am on the latest Quartz v5 (just ran `npm quartz upgrade`) and saw the node_module `sharp` is vulnerable with "high serverity". Can the upstream Quartz dependencies be updates so that users can `npm audit fix` without `--force`? Thanks a lot.