From 9335b8e64435ba809e7a2c9b68e42f348bf42d80 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Sat, 18 Jul 2026 13:55:00 +0000 Subject: [PATCH] fix: CVE-2026-9277 security vulnerability Automated dependency upgrade by OrbisAI Security --- frontend/package.json | 3 ++- frontend/yarn.lock | 5 +++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/frontend/package.json b/frontend/package.json index 44331d3..145620e 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -51,6 +51,7 @@ "react-router-dom": "^7.5.1", "react-scripts": "5.0.1", "recharts": "^3.8.1", + "shell-quote": "1.8.4", "sonner": "^2.0.3", "tailwind-merge": "^3.2.0", "tailwindcss-animate": "^1.0.7", @@ -75,7 +76,6 @@ ] }, "devDependencies": { - "serve": "^14.2.4", "@babel/plugin-proposal-private-property-in-object": "^7.21.11", "@craco/craco": "^7.1.0", "@emergentbase/visual-edits": "https://assets.emergent.sh/npm/emergentbase-visual-edits-1.0.8.tgz", @@ -88,6 +88,7 @@ "eslint-plugin-react-hooks": "5.2.0", "globals": "15.15.0", "postcss": "^8.4.49", + "serve": "^14.2.4", "tailwindcss": "^3.4.17" }, "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e" diff --git a/frontend/yarn.lock b/frontend/yarn.lock index d08c086..26d18fb 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -9768,6 +9768,11 @@ shebang-regex@^3.0.0: resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172" integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A== +shell-quote@1.8.4: + version "1.8.4" + resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.8.4.tgz#2edd9a4dcefc96649e2e2cb12f637b1f1d92a190" + integrity sha512-VsC6n6vz1ihYYyZZwX7YZSF5l5x36ca17OC+a69h94YqB7X6XLwf+5MOgynYir2SLFUbl8gIYvBo8K8RoNQ6bQ== + shell-quote@^1.7.3, shell-quote@^1.8.3: version "1.8.3" resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.8.3.tgz#55e40ef33cf5c689902353a3d8cd1a6725f08b4b"