Dependency Async vulnerable to Prototype Pollution

```
# npm audit report

async  <2.6.4
Severity: high
Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
No fix available
node_modules/async
  express-zip  *
  Depends on vulnerable versions of async
  node_modules/express-zip
```