[Snyk] Fix for 9 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/with-storybook/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Prototype Pollution SNYK-JS-AJV-584908	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	No	Proof of Concept
	504/1000 Why? Has a fix available, CVSS 5.8	Prototype Pollution SNYK-JS-HIGHLIGHTJS-1045326	No	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HIGHLIGHTJS-1048676	No	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-IMMER-1019369	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1076581	No	No Known Exploit
	584/1000 Why? Has a fix available, CVSS 7.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1314893	No	No Known Exploit
	629/1000 Why? Has a fix available, CVSS 8.3	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-597628	No	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Command Injection SNYK-JS-REACTDEVUTILS-1083268	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @storybook/addon-essentials

The new version differs by 250 commits.

• d09748c v6.1.20
• bb90a86 Update root, peer deps, version.ts/json to 6.1.20
• c6ec784 6.1.20 changelog
• 0ff4c31 Merge pull request Make preview mode's "sameSite" and "secure" cookie properties configurable vercel/next.js#14019 from storybookjs/chore_vue3_snippets_and_assorted_adjustments
• 7b8009d Merge pull request Create Next App and Next should validate Node.js version vercel/next.js#14015 from phated/phated/update-react-dev-utils
• e15a2e1 6.1.19 latest.json version file
• 45a5540 Update git head to 6.1.19
• 79b72d3 v6.1.19
• 978aed2 Update root, peer deps, version.ts/json to 6.1.19
• c891cab 6.1.19 changelog
• 7b98271 Merge pull request Load a vendor / 3rd-party CSS file that is not a CSS module? vercel/next.js#13991 from storybookjs/fix/13830-add-missing-dep
• d85bd6a Merge pull request Integration Example shows 404 Page vercel/next.js#13998 from storybookjs/13709--fix-typo
• daf69ba Merge pull request Javascript doesn't work when Next JS runs inside iframe in Storyblok CMS vercel/next.js#13680 from semihraifgurel/next
• 4f83e49 Merge pull request Detect node sass and react version vercel/next.js#13968 from oscard0m/patch-1
• 9a7ec62 Merge pull request Duplicate requests to API during SSG and unstable_revalidate vercel/next.js#13591 from crixx/chore/Dynamic Routing: Link component doesn't request the correct js file... vercel/next.js#13590-update-docs
• e12db32 Merge pull request #13945 from storybookjs/add-audi-docs
• 1faf457 Merge pull request [Example] with-typescript-types vercel/next.js#13746 from ka2jun8/patch-1
• afdac39 Merge pull request Defer getServerSideProps on client-side navigation vercel/next.js#13910 from storybookjs/13039-improve-hoisted-snippet
• 8692248 Merge pull request The new environment variables are not working with pm2 vercel/next.js#13758 from qoalu/patch-4
• 0762248 fix(component): add missing `regenerator-runtime` dependency
• fdf7167 6.1.18 latest.json version file
• d7150cf Update git head to 6.1.18
• 7b49fc1 v6.1.18
• ad47dce Update root, peer deps, version.ts/json to 6.1.18

See the full diff

Package name: @storybook/react

The new version differs by 250 commits.

• d09748c v6.1.20
• bb90a86 Update root, peer deps, version.ts/json to 6.1.20
• c6ec784 6.1.20 changelog
• 0ff4c31 Merge pull request Make preview mode's "sameSite" and "secure" cookie properties configurable vercel/next.js#14019 from storybookjs/chore_vue3_snippets_and_assorted_adjustments
• 7b8009d Merge pull request Create Next App and Next should validate Node.js version vercel/next.js#14015 from phated/phated/update-react-dev-utils
• e15a2e1 6.1.19 latest.json version file
• 45a5540 Update git head to 6.1.19
• 79b72d3 v6.1.19
• 978aed2 Update root, peer deps, version.ts/json to 6.1.19
• c891cab 6.1.19 changelog
• 7b98271 Merge pull request Load a vendor / 3rd-party CSS file that is not a CSS module? vercel/next.js#13991 from storybookjs/fix/13830-add-missing-dep
• d85bd6a Merge pull request Integration Example shows 404 Page vercel/next.js#13998 from storybookjs/13709--fix-typo
• daf69ba Merge pull request Javascript doesn't work when Next JS runs inside iframe in Storyblok CMS vercel/next.js#13680 from semihraifgurel/next
• 4f83e49 Merge pull request Detect node sass and react version vercel/next.js#13968 from oscard0m/patch-1
• 9a7ec62 Merge pull request Duplicate requests to API during SSG and unstable_revalidate vercel/next.js#13591 from crixx/chore/Dynamic Routing: Link component doesn't request the correct js file... vercel/next.js#13590-update-docs
• e12db32 Merge pull request #13945 from storybookjs/add-audi-docs
• 1faf457 Merge pull request [Example] with-typescript-types vercel/next.js#13746 from ka2jun8/patch-1
• afdac39 Merge pull request Defer getServerSideProps on client-side navigation vercel/next.js#13910 from storybookjs/13039-improve-hoisted-snippet
• 8692248 Merge pull request The new environment variables are not working with pm2 vercel/next.js#13758 from qoalu/patch-4
• 0762248 fix(component): add missing `regenerator-runtime` dependency
• fdf7167 6.1.18 latest.json version file
• d7150cf Update git head to 6.1.18
• 7b49fc1 v6.1.18
• ad47dce Update root, peer deps, version.ts/json to 6.1.18

See the full diff

Package name: serve

The new version differs by 11 commits.

• d941baa 12.0.0
• 6341041 Breaking: Update `clipboardy` to v2.3.0 (drops support for Node 8, end of life) ([Snyk] Security upgrade postcss from 8.4.14 to 8.4.31 #612)
• 3281c57 Bump lodash from 4.17.19 to 4.17.21 ([Snyk] Security upgrade cosmicjs from 4.1.7 to 5.0.1 #654)
• a85bd9d Add flag for disabling port switching ([Snyk] Security upgrade @babel/core from 7.20.12 to 7.22.6 #579)
• b71af1a Fix undefined local network address ([Snyk] Fix for 1 vulnerabilities #572)
• e3fe70a Fix spacing for CORS documentation ([Snyk] Security upgrade postcss from 8.4.5 to 8.4.31 #610)
• 818b5e9 Add `-p` port flag to the help command output. ([Snyk] Security upgrade next from 10.0.3 to 10.2.0 #607)
• 61731b1 Update repo location in package.json to be vercel/serve ([Snyk] Security upgrade next from 13.4.2 to 13.5.4 #641)
• fbf6376 fix: Bump ajv to 6.12.6 ([Snyk] Security upgrade next from 12.2.5 to 13.5.4 #635)
• cd7dcf2 Bump ini from 1.3.5 to 1.3.7 ([Snyk] Security upgrade next from 12.2.5 to 13.5.4 #638)
• 850cc0b Bump lodash from 4.17.15 to 4.17.19 ([Snyk] Security upgrade postcss from 8.4.5 to 8.4.31 #619)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic