Vulnerability in dependency extend@3.0.1

[andrewwakeling]

There's a known vulnerability in extend@3.0.1
https://nvd.nist.gov/vuln/detail/CVE-2018-16492

Updating to 3.0.2 should remove this vulnerability.

It would be great if this package could be updated as this is being flagged as a high vulnerability in my project.

[NehaJantre]

My project has transitive dependency on extend@3.0.1. I am not sure which of the root dependencies to update in order to update the extend package. I ran the "npm audit fix" commands to update the npm packages but it still didn't remove the extend@3.0.1 high vulnerability.