GHSA-qrmc-fj45-qfc2 Prototype Pollution in extend

• npm extend: >= 3.0.0, < 3.0.2 → fixed in 3.0.2 • npm extend: >= 1.1.3, < 2.0.2 → fixed in 2.0.2

Versions of `extend` prior to 3.0.2 (for 3.x) and 2.0.2 (for 2.x) are vulnerable to Prototype Pollution. The `extend()` function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation If you're using `extend` 3.x upgrade to 3.0.2 or later. If you're using `extend` 2.x upgrade to 2.0.2 or later.