From ac662e4a7633f712dad6a33b582abde33a09af3c Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Thu, 30 Jul 2026 09:19:09 +0000
Subject: [PATCH] fix: CVE-2026-13149 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 14 +++++++++-----
 package.json      |  3 +++
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a084b4a..808984d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -944,7 +944,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "2.0.1",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz",
+      "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0"
@@ -3733,7 +3735,9 @@
       "version": "2.9.7"
     },
     "brace-expansion": {
-      "version": "2.0.1",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz",
+      "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==",
       "requires": {
         "balanced-match": "^1.0.0"
       }
@@ -3996,7 +4000,7 @@
           "version": "9.0.5",
           "dev": true,
           "requires": {
-            "brace-expansion": "^2.0.1"
+            "brace-expansion": "2.1.2"
           }
         }
       }
@@ -4246,7 +4250,7 @@
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz",
       "integrity": "sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==",
       "requires": {
-        "brace-expansion": "^2.0.1"
+        "brace-expansion": "2.1.2"
       }
     },
     "minipass": {
@@ -4295,7 +4299,7 @@
           "version": "9.0.5",
           "dev": true,
           "requires": {
-            "brace-expansion": "^2.0.1"
+            "brace-expansion": "2.1.2"
           }
         },
         "supports-color": {
diff --git a/package.json b/package.json
index 5eb56e9..4406afc 100644
--- a/package.json
+++ b/package.json
@@ -70,5 +70,8 @@
     "mocha": "^11.7.6",
     "nock": "^14.0.15",
     "sinon": "^22.0.0"
+  },
+  "overrides": {
+    "brace-expansion": "2.1.2"
   }
 }