From bf92f5a619a508b18c4ab2d66acd68c92c04ab9c Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sat, 22 Aug 2026 00:09:56 +0000
Subject: [PATCH] fix: CVE-2026-69152 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 app/package.json   |  5 +++++
 app/pnpm-lock.yaml | 11 +++++++----
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/app/package.json b/app/package.json
index 149ce08aff29..03d69149da91 100644
--- a/app/package.json
+++ b/app/package.json
@@ -44,5 +44,10 @@
   },
   "optionalDependencies": {
     "native-reg": "1.1.1"
+  },
+  "pnpm": {
+    "overrides": {
+      "brace-expansion": "1.1.18"
+    }
   }
 }
diff --git a/app/pnpm-lock.yaml b/app/pnpm-lock.yaml
index 6d62fa1dda5f..08bab630a21a 100644
--- a/app/pnpm-lock.yaml
+++ b/app/pnpm-lock.yaml
@@ -4,6 +4,9 @@ settings:
   autoInstallPeers: false
   excludeLinksFromLockfile: false
 
+overrides:
+  brace-expansion: 1.1.18
+
 importers:
 
   .:
@@ -153,8 +156,8 @@ packages:
     resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
     engines: {node: '>=8'}
 
-  brace-expansion@1.1.14:
-    resolution: {integrity: sha512-MWPGfDxnyzKU7rNOW9SP/c50vi3xrmrua/+6hfPbCS2ABNWfx24vPidzvC7krjU/RTo235sV776ymlsMtGKj8g==}
+  brace-expansion@1.1.18:
+    resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -736,7 +739,7 @@ snapshots:
 
   binary-extensions@2.3.0: {}
 
-  brace-expansion@1.1.14:
+  brace-expansion@1.1.18:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
@@ -1020,7 +1023,7 @@ snapshots:
 
   minimatch@3.1.5:
     dependencies:
-      brace-expansion: 1.1.14
+      brace-expansion: 1.1.18
 
   minimist@1.2.8: {}