Security Alerts with usersynchronous Dependencies

[Abraxas3d]

How bad are these issues with the dependencies and what should we do about it?

https://github.com/phase4ground/usersynchronous/network/alerts

bootstrap-sass
moderate severity
Feb 22, 2019 by GitHub

nokogiri
moderate severity
Jan 17, 2019 by GitHub

rack
moderate severity
Nov 15, 2018 by GitHub

rails-html-sanitizer
moderate severity
Apr 26, 2018 by GitHub

loofah
moderate severity
Mar 21, 2018 by GitHub

paperclip
high severity
Jan 22, 2018 by GitHub

https://github.com/phase4ground/usersynchronous/network/alerts