From d55f20fc99feaec4d6084a7a38710a246dde6b7f Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 19 Aug 2026 02:55:16 +0000
Subject: [PATCH] fix: CVE-2026-13149 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 22 ++++++++++++++--------
 package.json      |  3 ++-
 2 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 321d853..449186f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -513,18 +513,24 @@
       }
     },
     "node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "license": "MIT"
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
+      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "license": "MIT",
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
     },
     "node_modules/brace-expansion": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.0.tgz",
-      "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "license": "MIT",
       "dependencies": {
-        "balanced-match": "^1.0.0"
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "20 || >=22"
       }
     },
     "node_modules/color-convert": {
diff --git a/package.json b/package.json
index 76842d9..331bb56 100644
--- a/package.json
+++ b/package.json
@@ -20,6 +20,7 @@
     "semver": "^7.6.3"
   },
   "overrides": {
-    "js-cookie": ">=3.0.7"
+    "js-cookie": ">=3.0.7",
+    "brace-expansion": "5.0.9"
   }
 }