Issue in a dependency of a12n-server:
https://github.com/highlightjs/highlight.js/releases
Impact is likely low due to highlight.js only really being used for JSON.

Users of the a12nserver package will get the updated dependency anyway, so this security issue only affects users of the pre-built docker image.