Security vulnerability in Lodash (Update to version 4.17.12 or later)

[aw-davidson]

Prototype pollution vulnerability found on 2019-07-15

[mercmobily]

Can you please update to the latest lodash? The one you are using is vulnerable, and every package using your request-promise-native suffers from it. Thanks

[analog-nico]

I am in the process of updating lodash via request-promise-core. The next version of request-promise-native will have this fixed.