Please update lodash https://snyk.io/vuln/npm:lodash:20180130 https://github.com/oauthjs/node-oauth2-server/blob/master/package.json#L22