[Snyk] Fix for 3 vulnerabilities

[obrien-j]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • f2/package.json
  • f2/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	526/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.1	Arbitrary Code Injection SNYK-JS-EJS-1049328	Yes	Proof of Concept
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Validation Bypass SNYK-JS-SANITIZEHTML-1070780	No	No Known Exploit
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Access Restriction Bypass SNYK-JS-SANITIZEHTML-1070786	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @storybook/react

The new version differs by 250 commits.

• b97e2ee v6.0.0
• de37d6f Update root, peer deps to 6.0.0
• ba55375 6.0.0 changelog
• 30d685c Merge pull request #11877 from storybookjs/chore_add_api_section_snippets
• e9ec609 Merge pull request #11882 from storybookjs/add_faq_to_docs
• 7096da8 Merge pull request #11872 from storybookjs/chore_add_workflow_snippets
• c55b61d Merge pull request #11881 from storybookjs/add-readmes-for-deprecated-content
• f899683 adds faq to the documentation
• ab88075 Add deprecated docs to monorepo
• fe3b3e0 Merge branch 'next' into chore_add_api_section_snippets
• 6eee72c Merge branch 'next' into chore_add_workflow_snippets
• d8180f0 component-story-with-query was adjusted.
• 7a34522 Merge pull request #11867 from storybookjs/add-install-snippet
• 1a8351e Merge pull request #11878 from storybookjs/documentation_snippets_updates
• e680f98 Merge pull request #11876 from storybookjs/docs/preview-entries
• 313a8b7 TS => js
• d063351 Merge pull request #11880 from storybookjs/6.0-docs-tweaks
• fbdf836 fix broken markdown
• 5bddd6f updates per feedback
• 2581f63 api section feedback changes
• 9daa2b7 Merge pull request #11879 from storybookjs/remove-angular-dummy-snippet
• 483a8cf Remove angular dummy snippet
• 714076b removes the shell and json file references.
• 99aa694 initial snippets for api section

See the full diff

Package name: sanitize-html

The new version differs by 42 commits.

• fd3cb54 changelog credit
• 6012524 Merge pull request Update API deps #460 from apostrophecms/iframe-validation-redux
• 5395e36 markdown
• bff6d9f Merge pull request Serve fonts from the public directory #459 from Aspedm/main
• 1ecf30f pass eslint
• 54851d0 new and interesting iframe validation exploits
• dafee4f Update README.md
• b77e1d9 2.3.1
• bdf7836 Merge pull request Update azure-pipelines.yml for Azure Pipelines #458 from apostrophecms/stop-idna-iframe-attacks
• 477b032 Updates README to specify node version (Update azure-pipelines.yml for Azure Pipelines #457)
• 5804fa9 changelog
• ca4b62a stop IDNA iframe attacks
• 7229906 Fleshes out changelog message
• 5d6c6e6 Updates the version number
• af6e348 Fixes a typo in the changelog
• 251e14a Merge pull request Ip binding #429 from TrySound/upgrade-htmlparser2
• 102c623 Upgrade to v6
• f07bf65 Upgrade htmlparser2
• 6a7b0ca bumps the version number (rebase master and only include information that is filled out on the … #446)
• 4be8a61 Adds acknowledgement to changelog. (fix stepper test #445)
• d59fdac Merge pull request Minor clean up #444 from aHerbots/patch-1
• 34f00be Update CHANGELOG.md
• 5ae731e Update README.md
• 07d1523 Allow 'tel' links by default

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic