@vidispine/vdt-materialui (>=0.12.0 <=26.2.0-pre.1) potentially affected by CVE-2020-8203 via lodash.updatewith (=4.10.2)

lodash.updatewith NPM version =4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.updatewith and may be impacted: - @vidispine/vdt-materialui =0.12.0, =26.2.0-pre.1 Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...