Dependabot security update

[DawnmarieDesJardins]

Received this security alert - labeling as a dependency issue for next update.

Dependabot cannot update this dependency
View details about this error or learn more about Dependabot security updates.

1 dot-prop vulnerability found in …/cli/package-lock.json 9 days ago
Remediation
Upgrade dot-prop to version 5.1.1 or later. For example:

"dependencies": {
"dot-prop": ">=5.1.1"
}
or…
"devDependencies": {
"dot-prop": ">=5.1.1"
}
Always verify the validity and compatibility of suggestions with your codebase.

Details
CVE-2020-8116
high severity
Vulnerable versions: < 5.1.1
Patched version: 5.1.1
Prototype pollution vulnerability in dot-prop npm package version 5.1.0 and earlier allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

[DawnmarieDesJardins]

Closing issue. Lab has been removed until it can be updated, this no longer applies.