openbadge pulls in vulnerable module lodash - CVE-2021-23337 #7
Description
The latest lodash module which is not vulnerable is 4.17.21. For more on the vulnerability, please visit https://nvd.nist.gov/vuln/detail/CVE-2021-23337
Recommendation
Update the lodash module dependency to 4.17.21 or later