deep-extend dependency issue.

Found vulnerability while installing react-image-cropper. Latest version of react-image-cropper takes "deep-extend": "^0.4.1", as a dependency. But to avoid vulnerability "deep-extend": "^0.5.x" is required.

How to resolve this vulnerability.