package-lock.json not updated

Question

Due to a dependency in package-lock.json file, a vulnerability warning was given by GitHub. I removed the old version and installed new version using npm