Due to a security issue in the jsonpath libraries from Goessner and peekmo/jsonpath, support for these libraries have been removed in this release. Now only the flow/jsonpath library is supported. If you don't use the JSONPath parser in your Feeds importers, then there's nothing you need to do.