I recently pushed an Angular CLI 5 application to GitHub and it indicated the following:
We found a potential security vulnerability in one of your dependencies.
I was patient and they fixed the problem:
npm update karma@latest
should work.