Vulnerability in hammerjs : 2.0.8

[Inscramble]

I have recently encountered an issue where the lodash package is vulnerable to prototype pollution. The issue is discovered on the SOnatype. I would like to report this issue to the application owner and provide the solution as soon as possible.

[Inscramble]

I ran Sonatype scan for my application which is using hammerjs v2.0.8. Given below is the information I got from the Sonatype-
The lodash package is vulnerable to Prototype Pollution. The template function in lodash.js and index.js allows the sourceURL property of the options object access to the _.template object. An attacker who can control the source URL can leverage this to alter properties on the prototype chain, which can cause other sections of code to behave in an arbitrary and malicious way.