Critical Vulnerable module - underscore module

[udhayamoorthys]

Critical Arbitrary Code Execution in underscore
Package underscore
Patched in >=1.12.1
Dependency of json-sql

run npm audit

[lbeschastny]

If I remember correctly, only _.template is affected by this vulnerability.

So, json-sql should not be actually affected in any way.

[lbeschastny]

Bumping underscore is still a good idea, though

[santhoshreddytirumuru]

There is a pull request with potential fix for this
#51