Xz package contains a vulnerability

Support Software & Applications
18

And do you understand why they are recommending that?