In our project, Snyk reported cryptiles@4.1.1 as a dependency with a known security vulnerability
The latest version of cryptiles (4.1.2) seems to have fixed this vulnerability.

More info about the (medium severity) vulnerability in cryptiles@4.1.1 can be found at
https://snyk.io/vuln/npm:cryptiles:20180710