From 6cdd66ae980d9574a84c73463b116585c4447ae2 Mon Sep 17 00:00:00 2001
From: Sowmithri B S <sowmi3b@gmail.com>
Date: Tue, 29 Sep 2026 23:12:29 +0530
Subject: [PATCH] upgraded vulnerable version

---
 package.json                 |  7 ++++---
 packages/shared/package.json |  2 +-
 yarn.lock                    | 34 +++++++++++++++++-----------------
 3 files changed, 22 insertions(+), 21 deletions(-)

diff --git a/package.json b/package.json
index 7c11450a6..41aaff2b2 100644
--- a/package.json
+++ b/package.json
@@ -71,17 +71,18 @@
     "browserslist": "^4.28.7",
     "copy-webpack-plugin/**/ajv": "^8.20.0",
     "eslint/**/ajv": "^6.15.0",
-    "fast-uri": "^3.1.3",
+    "fast-uri": "^3.1.7",
     "fast-xml-parser": "^5.10.1",
     "follow-redirects": "^1.15.11",
     "fork-ts-checker-webpack-plugin/**/ajv": "^6.15.0",
     "immutable": "^5.1.8",
-    "js-yaml": "^4.3.0",
+    "js-yaml": "^4.3.2",
     "linkify-it": "^5.0.2",
     "lodash": "^4.18.1",
     "lodash-es": "^4.18.1",
     "mini-css-extract-plugin/**/ajv": "^8.20.0",
     "minimatch": "^3.1.5",
+    "nanoid": "^3.3.18",
     "node-forge": "^1.4.0",
     "on-headers": "1.1.0",
     "picomatch": "4.0.4",
@@ -91,7 +92,7 @@
     "react-router": "6.30.4",
     "serialize-javascript": "^7.0.7",
     "stylelint/**/ajv": "^8.20.0",
-    "undici": "^6.27.0",
+    "undici": "^6.28.1",
     "webpack": "^5.105.4",
     "webpack-dev-server/**/ajv": "^8.20.0",
     "webpack/**/ajv": "^8.20.0",
diff --git a/packages/shared/package.json b/packages/shared/package.json
index 7891dbbaf..bb87df43e 100644
--- a/packages/shared/package.json
+++ b/packages/shared/package.json
@@ -31,7 +31,7 @@
     "fuzzysearch": "^1.0.3",
     "i18next-parser": "9.3.0",
     "js-base64": "^3.7.7",
-    "js-yaml": "^4.3.0 ",
+    "js-yaml": "^4.3.2",
     "lodash-es": "^4.18.1",
     "murmurhash-js": "^1.0.0",
     "react-copy-to-clipboard": "5.x",
diff --git a/yarn.lock b/yarn.lock
index 14f1552cc..44027b71a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2208,7 +2208,7 @@
     fuzzysearch "^1.0.3"
     i18next-parser "9.3.0"
     js-base64 "^3.7.7"
-    js-yaml "^4.3.0 "
+    js-yaml "^4.3.2"
     lodash-es "^4.18.1"
     murmurhash-js "^1.0.0"
     react-copy-to-clipboard "5.x"
@@ -7365,10 +7365,10 @@ fast-levenshtein@^2.0.6, fast-levenshtein@~2.0.6:
   resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz#3d8a5c66883a16a30ca8643e851f19baa7797917"
   integrity sha1-PYpcZog6FqMMqGQ+hR8Zuqd5eRc=
 
-fast-uri@^3.0.1, fast-uri@^3.1.3:
-  version "3.1.4"
-  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.1.4.tgz#3b3daf9ce68f41f956df0b505132c0cfce9ec7af"
-  integrity sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==
+fast-uri@^3.0.1, fast-uri@^3.1.7:
+  version "3.1.8"
+  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.1.8.tgz#f7db8d942e20eead3cfe93b0beeb4eb0169e938b"
+  integrity sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==
 
 fast-xml-builder@^1.2.0:
   version "1.2.0"
@@ -9774,10 +9774,10 @@ js-base64@^3.7.7:
   resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
   integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
 
-js-yaml@^3.13.1, js-yaml@^4.1.0, js-yaml@^4.3.0, "js-yaml@^4.3.0 ":
-  version "4.3.0"
-  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.3.0.tgz#d1900572a7f7cf0b5f540c83673e60bad3436592"
-  integrity sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==
+js-yaml@^3.13.1, js-yaml@^4.1.0, "js-yaml@^4.3.0 ", js-yaml@^4.3.2:
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.3.2.tgz#8e44fb14a2643c59726bb15787b5f1512cb3d3fb"
+  integrity sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==
   dependencies:
     argparse "^2.0.1"
 
@@ -10502,10 +10502,10 @@ nanoclone@^0.2.1:
   resolved "https://registry.yarnpkg.com/nanoclone/-/nanoclone-0.2.1.tgz#dd4090f8f1a110d26bb32c49ed2f5b9235209ed4"
   integrity sha512-wynEP02LmIbLpcYw8uBKpcfF6dmg2vcpKqxeH5UcoKEYdExslsdUA4ugFauuaeYdTB76ez6gJW8XAZ6CgkXYxA==
 
-nanoid@^3.3.16:
-  version "3.3.16"
-  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.16.tgz#a04d8ec4b1f10009d2d533947aefe4293737816c"
-  integrity sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==
+nanoid@^3.3.16, nanoid@^3.3.18:
+  version "3.3.19"
+  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.19.tgz#336d4aa4bcd4fb24d2cddede7ffeae40bec03f0a"
+  integrity sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==
 
 natural-compare@^1.4.0:
   version "1.4.0"
@@ -13449,10 +13449,10 @@ underscore.string@~3.3.4:
     sprintf-js "^1.1.1"
     util-deprecate "^1.0.2"
 
-undici@^6.19.5, undici@^6.27.0:
-  version "6.27.0"
-  resolved "https://registry.yarnpkg.com/undici/-/undici-6.27.0.tgz#41f9e48f7c5a40d27376caaead8c9a9fc7bca9c4"
-  integrity sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==
+undici@^6.19.5, undici@^6.28.1:
+  version "6.29.0"
+  resolved "https://registry.yarnpkg.com/undici/-/undici-6.29.0.tgz#140fa16e337ac706d6ff12f03fbe5c4357e5f9a3"
+  integrity sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==
 
 union@~0.5.0:
   version "0.5.0"