Version 1.2.2 was released today, which contains an updated version of chart.js due to CVE-2020-7746.
However, as the options parameter does not contain user input, there is no risk.
options