[Snyk] Fix for 4 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JS-CKEDITOR4-2430344	No	No Known Exploit
	566/1000 Why? Recently disclosed, Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	No	No Known Exploit
	651/1000 Why? Recently disclosed, Has a fix available, CVSS 7.3	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	No	No Known Exploit
	566/1000 Why? Recently disclosed, Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ckeditor4

The new version differs by 12 commits.

• 9335fb4 Added CKEditor 4.18.0 standard-all.
• 0a402ca Added CKEditor 4.17.2 standard-all.
• b71b8bf Added CKEditor 4.17.1 standard-all.
• 1690c8f Added CKEditor 4.17.0 standard-all.
• b2758d4 Added CKEditor 4.16.2 standard-all.
• 814c589 Added CKEditor 4.16.1 standard-all.
• 98a1bce Added CKEditor 4.16.0 standard-all.
• b1aa2f3 Added CKEditor 4.15.1 standard-all.
• f233b05 Added CKEditor 4.15.0 standard-all.
• 8d84af6 Merge pull request #93 from ckeditor/t/4129
• 4ce8d5c Add .npmignore file to ignore dotfiles.
• 8eccaf3 Added CKEditor 4.14.1 standard-all.

See the full diff

Package name: laravel-mix

The new version differs by 19 commits.

• 14fbebc 6.0.30
• 9c25ccf Adjust file isDir/isFile checks (#3094)
• a37c48e Silence ESM bundler warnings for Vue 3 (#3093)
• b5f5ae2 Exit normally when webpack exits expectedly (#3091)
• a436af2 Fix HMR usage for *.test domains (#3092)
• 7b79cfb Fix typescript usage with CJS modules (#3090)
• 8278dcd Update to latest webpack-dev-server (#3088)
• 3ee38b5 6.0.29
• b9bca8f fix(watch poll): Fix `--watch-options-poll` command detection (#3071)
• 644fd2f Merge branch 'master' of ssh://github.com/jeffreyway/laravel-mix
• d27a77a Fix typo (#3072)
• ceaf8e3 6.0.28
• 49907db Fix hot reload (#3066)
• e1871cf 6.0.27
• 87761b3 Don’t force require dependencies (#3050)
• da91e7f 6.0.26
• 5b8db29 Remove .only
• 0365e84 Fix typo
• 98fe3ef Resolve loaders local to laravel-mix first (#3047)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)