lodash vulnerability reported by "npm audit"

[matthew-white]

Using karma-browserify 5.2.0, when I run npm audit, I receive the following report:

┌───────────────┬────────────────────────────────────────┐
│ Low           │ Prototype Pollution                    │
├───────────────┼────────────────────────────────────────┤
│ Package       │ lodash                                 │
├───────────────┼────────────────────────────────────────┤
│ Patched in    │ >=4.17.5                               │
├───────────────┼────────────────────────────────────────┤
│ Dependency of │ karma-browserify [dev]                 │
├───────────────┼────────────────────────────────────────┤
│ Path          │ karma-browserify > lodash              │
├───────────────┼────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/577 │
└───────────────┴────────────────────────────────────────┘

I see that this was also mentioned in a comment at karma-runner/karma#2994.

[nikku]

Should be fixed with karma-browserify@5.3.0.