[Snyk] Security upgrade tinymce from 4.5.2 to 5.10.0
Created by: snyk-bot
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-1056408 |
Yes | No Known Exploit | |
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-1298037 |
Yes | No Known Exploit | |
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-1766967 |
Yes | No Known Exploit | |
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-1910225 |
Yes | No Known Exploit | |
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-543825 |
No | No Known Exploit | |
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-568922 |
No | Proof of Concept | |
Cross-site Scripting (XSS) SNYK-JS-TINYMCE-598223 |
No | No Known Exploit | |
Cross-site Scripting (XSS) npm:tinymce:20170613 |
No | No Known Exploit | |
Cross-site Scripting (XSS) npm:tinymce:20180522 |
No | No Known Exploit |
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report