Dependency vulnerability

[darkwebdev]

NSP reports a potential vulnerability in dependency fresh: https://nodesecurity.io/advisories/526

Does it make sense to upgrade an express to version ^4.15.5?

[KBPsystem777]

Same thing here:

33 vulnerabilities found [1315 packages audited]
    Severity: 19 Low | 2 Moderate | 10 High | 2 Critical