'how to solve Prototype Pollution issue in VS code

I installed a package that is related to my learning courses. the codes are released on 2018 and I updated all the versions on package-lock.json and package.json but again I faced problem. I have even tried npm audit but the comment is:

Severity: moderate
Prototype Pollution - https://npmjs.com/advisories/1649
No fix available
node_modules/fawn/node_modules/mquery
  mongoose  0.0.3 - 0.0.6 || 1.7.2 - 5.11.6
  Depends on vulnerable versions of bson
  Depends on vulnerable versions of mongodb
  Depends on vulnerable versions of mpath
  Depends on vulnerable versions of mquery
  node_modules/fawn/node_modules/mongoose
    fawn  *
    Depends on vulnerable versions of mongoose
    node_modules/fawn
7 vulnerabilities (3 moderate, 4 high)
Some issues need review, and may require choosing
a different dependency.
PS C:\Users\Enter Computer\Desktop\vidly-api-node>

Please help me!

mongoosevisual-studio-codeprototypenode-modules


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source

Related Questions