[Snyk] Fix for 9 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • package.json
  • package-lock.json

• Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches. Find out more.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-173700	No	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-72889	No	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-72890	No	No Known Exploit
	Prototype Pollution SNYK-JS-DOTPROP-543489	No	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKDOWNIT-459438	No	Proof of Concept
	Cross-site Scripting (XSS) npm:bootstrap:20160627	No	No Known Exploit
	Cross-site Scripting (XSS) npm:bootstrap:20180529	No	No Known Exploit

Commit messages

Package name: ember-highcharts

The new version differs by 7 commits.

• 6a6b72f Release 1.2.0
• 6118ecc Update Changelog for v1.2.0
• 8dac788 Merge pull request #165 from 2hu12/patch-1
• 787d4b7 Add comment for "app.import"
• 8a63599 Use the "app" argument if available
• 7fad766 Merge pull request #164 from mayatron/wip-bootstrap
• c22365a Bump bootstrap version to fix security vulnerability

See the full diff

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept
	Prototype Pollution npm:lodash:20180130	No Known Exploit

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic