Vulnerability in node-fetch library accused by mend

[Mikhaelle]

I'm using a mend to scan possible vulnerabilities in my code and when i inset the CalendarPicker library the mend acuses this:
It is possible to update the node-fetch version in the project?

[arttumat]

Having the same issue, and the last non-affected version (6.1.5) depends on moment which is a no go for me.