Vulnerability found in dependency find-my-way

[AriaPokotengYe]

• Used appropriate template for the issue type
• Searched both open and closed issues for duplicates of this issue
• Title adequately and concisely reflects the feature or the bug

Restify Version:8.5.1
Node.js Version: 8.11.3

Expected behaviour

Upgrade the version of find-my-way. Or if it is not a risk, please help to explain why. Thanks.

Actual behaviour

Restify uses an old version of find-my-way that has a known vulnerability.

"find-my-way": "^2.0.1",

NVD reported a vulnerability of this version of find-my-way. https://nvd.nist.gov/vuln/detail/CVE-2020-7764
This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5.

Repro case

N/A

Cause

N/A

Are you willing and able to fix this?

Yes