Should upgrade lodash version to >=4.17.12

[yiyione]

When I run yarn audit fix, I got a vulnerability from vsce:
│ high │ Prototype Pollution
│ Package │ lodash
│ Patched in │ >=4.17.12
│ Dependency of │ vsce
│ Path │ vsce > lodash
│ More info │ https://www.npmjs.com/advisories/1065

[joaomoreno]

Can you show me the full output of yarn audit fix? I'm getting different results.

[yiyione]

I'm sorry, I didn't run yarn audit fix under vscode-vsce project, looks like it doesn't have vulnerability here.
I run it in another project, has dependency of vsce:
"devDependencies": { "vsce": "^1.73.0" }
I got this: