Module using outdated lodash

[ariellyciandt]

Overview

When I run npm audit in a project that is using the latest version of this module, it is reporting that the lodash version of it is outdate. Could somebody take a look on it?

Vulnerabilities found

Module	Path	Recommended Version	Overview	Issue
lodash	serverless-enable-api-logs > lodash	>=4.17.5	Prototype Pollution	https://nodesecurity.io/advisories/577
lodash	serverless-enable-api-logs > lodash	>=4.17.11	Prototype Pollution	https://nodesecurity.io/advisories/782
lodash	serverless-enable-api-logs > lodash	>=4.17.12	Prototype Pollution	https://nodesecurity.io/advisories/1065

Version

^2.0.0

Date

Aug 5th, 2019

Evidences