It seems the last version of grunt-ts requires the following package(s):
csproj2ts inturn using vulnerable lodash version 4.17.4
Unfortunately, these packages have a dependency of lodash. https://snyk.io/vuln/npm:lodash fixed at version 4.17.12.
I'm just creating the issue to notify this fact and request a dependency update when the related packages are updated.