Prototype pollution : vulnerabilities found in this library

There are 2 moderate vulnerabilities found in this library.

https://snyk.io/test/npm/react-syntax-highlighter-virtualized-renderer/1.1.0

package.json in git repo https://github.com/conorhastings/react-syntax-highlighter-virtualized-renderer/blob/master/package.json shows react-syntax-highlighter version as 12.2.1 and is in devDependencies, However we installed react-syntax-highlighter-virtualized-renderer in our react app we see react-syntax-highlighter version is "^5.1.2".

Start with package.json and the linked Snyk report. Compare the repository's react-syntax-highlighter 12.2.1 devDependency with the installed ^5.1.2 version, then confirm the intended dependency and vulnerability remediation; the issue does not define what completion should look like.

Written by the indexing model from the issue text.