**underscore** npm package(version 1.9.1) being used as a dependency is vulnerable. Please refer the below link: https://github.com/advisories/GHSA-cf4h-3jhx-xvhq Request to update the package.json to use the patched version of **underscore** Thanks in Advance, Amit M