Vulnerable Package issue exists @ Npm-lodash-4.17.11 in branch main

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Namespace: James-AST
Repository: msft
Repository Url: https://github.com/James-AST/msft
CxAST-Project: James-AST/msft
CxAST platform scan: d217bf9e-499c-4ae8-a115-08b6cd62b182
Branch: main
Application: msft
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1321

Addition Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 4.17.21

References
Advisory
Pull request
Commit
Disclosure