trying to track down the source of this vulnerability in my project and it's like navigating a never-ending web of dependency hell.