There is a high severity vulnerability in the current version (`1.5.0`) - Denial of Service https://npmjs.com/advisories/1203 It does not pass `npm audit`. Please upgrade `mongodb` to version `>=3.1.13` so it passes. <bountysource-plugin> --- There is a **[$20 open bounty](https://www.bountysource.com/issues/82252859-update-mongodb-version-to-patch-high-severity-vulnerability?utm_campaign=plugin&utm_content=tracker%2F12293389&utm_medium=issues&utm_source=github)** on this issue. Add to the bounty at [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F12293389&utm_medium=issues&utm_source=github). </bountysource-plugin>