Update vulnerable package
>>> [!note] Migrated issue
<!-- Drupal.org comment -->
<!-- Migrated from issue #3589411. -->
Reported by: [queenielow](https://www.drupal.org/user/83281)
Related to !783
>>>
<h3 id="summary-problem-motivation">Problem/Motivation</h3>
<p>Run "npm audit ----omit=dev" on command line and the result is as below:</p>
<p>nvm version 22.22</p>
<p># npm audit report</p>
<p>immutable 4.0.0-rc.1 - 4.3.7<br>
Severity: high<br>
Immutable is vulnerable to Prototype Pollution - <a href="https://github.com/advisories/GHSA-wf6x-7x77-mvgw">https://github.com/advisories/GHSA-wf6x-7x77-mvgw</a><br>
fix available via `npm audit fix`<br>
node_modules/immutable</p>
<p>nanoid <3.3.8<br>
Severity: moderate<br>
Predictable results in nanoid generation when given non-integer values - <a href="https://github.com/advisories/GHSA-mwcw-c2x4-8c55">https://github.com/advisories/GHSA-mwcw-c2x4-8c55</a><br>
fix available via `npm audit fix`<br>
node_modules/nanoid</p>
<p>picomatch <=2.3.1<br>
Severity: high<br>
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching - <a href="https://github.com/advisories/GHSA-3v7f-55p6-f55p">https://github.com/advisories/GHSA-3v7f-55p6-f55p</a><br>
Picomatch has a ReDoS vulnerability via extglob quantifiers - <a href="https://github.com/advisories/GHSA-c2c7-rcm5-vvqj">https://github.com/advisories/GHSA-c2c7-rcm5-vvqj</a><br>
fix available via `npm audit fix`<br>
node_modules/picomatch</p>
<p>postcss <8.5.10<br>
Severity: moderate<br>
PostCSS has XSS via Unescaped </p>
<p> in its CSS Stringify Output - <a href="https://github.com/advisories/GHSA-qx2v-qp2m-jg93">https://github.com/advisories/GHSA-qx2v-qp2m-jg93</a><br>
fix available via `npm audit fix`<br>
node_modules/postcss</p>
<p>4 vulnerabilities (2 moderate, 2 high)</p>
<h3 id="summary-proposed-resolution">Proposed resolution</h3>
<p>Run `npm audit fix` to fix all vulnerabilities</p>
issue