js-yaml (prior to 3.13.0) security vulnerability

Looks like js-yaml 3.12.1, which my security scan says Plotly depends on, has a Denial of Service security vulnerability. A yarn why seems to indicate that it's coming from plotly.js -> mapbox-gl -> gray-matter.

Info on the js-yaml security vulnerability - https://www.npmjs.com/advisories/788