From b82344703766a7e7eae4878de30372f73bfe3a53 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Mon, 31 Aug 2026 10:50:34 +0000
Subject: [PATCH] fix: GHSA-5p4m-2wfm-xmqj security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 20 +++++++++++++++-----
 package.json      |  5 ++++-
 2 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index b2d8529..09b6deb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "localpdf-studio",
-  "version": "4.0.2",
+  "version": "4.0.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "localpdf-studio",
-      "version": "4.0.2",
+      "version": "4.0.3",
       "license": "AGPL-3.0",
       "dependencies": {
         "@pdf-lib/fontkit": "^1.1.1",
@@ -2440,9 +2440,19 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
diff --git a/package.json b/package.json
index ad6809b..a4ffd7f 100644
--- a/package.json
+++ b/package.json
@@ -175,5 +175,8 @@
         "role": "Editor"
       }
     ]
+  },
+  "overrides": {
+    "js-yaml": "4.3.1"
   }
-}
\ No newline at end of file
+}