Depends in a vulnerable version of lodash.pick

[valleywood]

Package depends in a vulnarable version of lodash.pick:

lodash.pick >=4.0.0 Severity: high Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw fix available via npm audit fix --force Will install convert-svg-to-png@0.3.1, which is a breaking change node_modules/lodash.pick convert-svg-core >=0.3.2 Depends on vulnerable versions of lodash.pick node_modules/convert-svg-core convert-svg-to-png >=0.3.2 Depends on vulnerable versions of convert-svg-core node_modules/convert-svg-to-png

No patch available in lodash.pick maybe import from lodash instead which has a security patch.