Security Vulnerability in hapijs/hoek, which is a dependency on gulp-sass by way of gulp-sass having a dependency on nodejs/node-gyp.
hapijs/hoek has a patched version and in order to get it in gulp-sass, they are waiting for nodejs/node-gyp to merge the pull request to update hoek
More info on issue