Assess the issue, and weigh up risk against effort. If the risk is high, you could remove the dependency.
Both Snyk CLI and the GitHub integration allow you to ignore the vulnerability for 30 days.
