[Snyk] Fix for 6 vulnerabilities

[xhad]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	539/1000 Why? Has a fix available, CVSS 6.5	Cross-site Scripting (XSS) SNYK-JS-CKEDITOR-72618	No	No Known Exploit
	641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	Yes	No Known Exploit
	509/1000 Why? Has a fix available, CVSS 5.9	Regular Expression Denial of Service (ReDoS) npm:moment:20161019	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ckeditor

The new version differs by 32 commits.

• b1a25e9 Added CKEditor 4.12.1 standard-all.
• 883e27e Added CKEditor 4.12.0 standard-all.
• b42e901 Added CKEditor 4.11.4 standard-all.
• 7989de7 Added CKEditor 4.11.3 standard-all.
• b711816 Added CKEditor 4.11.2 standard-all.
• 85c07e9 Use image hotlinked to CDN.
• 70e6f8f Added CKEditor 4.11.1 standard-all.
• e92b6fb Merge branch 'latest'
• bee795a Merge branch 'master' into latest
• da5154f Merge branch 'master' into stable
• 771a944 Added CKEditor 4.11.0 standard-all.
• 835e162 Duplicated readme assets in root directory to get around npm image unavailable ckeditor/ckeditor4#2405.
• 279d943 Added CKEditor 4.10.1 standard-all.
• fdcca8c Proted the changes from ckeditor-dev README.md.
• cb5607c Added a dedicated npm readme.
• 485918a Added CKEditor 4.10.0 standard-all.
• 993eb4f Added CKEditor 4.9.2 standard-all.
• e0b4611 Added CKEditor 4.9.1 standard-all.
• f44120f Merge branch 'stable'
• a8497c4 Added CKEditor 4.9.0 standard-all.
• 3e0ba2f Added CKEditor 4.8.0 standard-all.
• 0bee34f Update ISSUE_TEMPLATE
• 97b8f41 Added CKEditor 4.7.3 standard-all.
• e1db4f1 Added CKEditor 4.7.2 standard-all.

See the full diff

Package name: extract-text-webpack-plugin

The new version differs by 139 commits.

• cc3ba94 chore(release): 3.0.2
• d5a1de2 fix: refer to the `entrypoint` instead of the first `module` (`module.identifier`) (event on smarttable akveo/ngx-admin#601)
• 5286ab2 build(defaults): update to v1.6.0 (Routing Anomaly akveo/ngx-admin#652)
• 4cfde50 chore(release): 3.0.1
• 8de6558 fix: get real path from `__filename` instead of `__dirname` (`NS`)
• 510704f fix(index): stricter check for `shouldExtract !== wasExtracted` (Update ng2-bootstrap to version 1.1.17 🚀 akveo/ngx-admin#605)
• 6a660f3 docs(README): update install instructions (Merge pull request #1 from akveo/master akveo/ngx-admin#570)
• 083a6c8 docs(README): add custom `[contenthash]` formats (Alerts popup overflows to the left on iphone 5 akveo/ngx-admin#566)
• d7a75fc chore(release): 3.0.0
• 7ae32d9 refactor: Apply webpack-defaults & webpack 3.x support (add sweetalert akveo/ngx-admin#540)
• dd43832 fix: add missing `options.ignoreOrder` details in Error message (Use font-awesome in Menu sidebar akveo/ngx-admin#539)
• e81b883 chore(release): 2.1.2
• 8766821 fix(index): resolve schemas relative to `__dirname` (Install Failing akveo/ngx-admin#536)
• 0271b39 chore(release): 2.1.1
• e595417 fix: don't extract from common async chunks (Change blur theme doesn't work after build:prod akveo/ngx-admin#508)
• a8ae003 chore(package): fix broken links && update devDependencies (Trouble using mariadb akveo/ngx-admin#531)
• c3cb091 fix(loader): rm unnecessary `this.cacheable` (caching) (How to hidde side menu base on some case? akveo/ngx-admin#530)
• eaa5236 docs: rm `RELEASE.md` (Unable to import css  akveo/ngx-admin#532)
• 671e35e chore(package): update `webpack-sources` v0.1.0...1.0.1 (Update ng2-uploader to version 1.6.1 🚀 akveo/ngx-admin#526)
• dfeb347 fix: validation schema (`schema-utils`) (Do you plan move project to angular-cli ? akveo/ngx-admin#527)
• d0e88d0 docs(README): add lead-in description (Update imports-loader to version 0.7.0 🚀 akveo/ngx-admin#517)
• 58dd5d3 fix: add a not null check for the content property before throwing error (Add Right To Left Language Support akveo/ngx-admin#404)
• 6c50d8e Update README.md (Update zone.js to version 0.7.2 🚀 akveo/ngx-admin#469)
• c63dc04 docs(README): clarify to set allChunks option when using CommonsChunkPlugin (chore(version): bump version to 0.8 (angular 2.2.3) akveo/ngx-admin#476)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)