All the vulnerabilities related to the version 0.2.2 of the package
Prototype Pollution in deep-extend
Versions of deep-extend
before 0.5.1 are vulnerable to prototype pollution.
Update to version 0.5.1 or later.
Command Injection in lodash
lodash
versions prior to 4.17.21 are vulnerable to Command Injection via the template function.