TaffyDB is vulnerable with high Severity
this comes as indirect dependency of yours (google-gax -> protobufjs-cli -> jsdoc -> TaffyDB)
right now jsdoc has released a version without TaffyDB, and protobufjs-cli has released a new version 1.1.0 to update their jsdoc version to fix it
but google-gax is locked to version 1.0.2 of protobufjs-cli
so you need to update to version 1.1.0 of protobufjs-cli to fix this