The daily Security Maintenance scan found vulnerabilities with an available fix.
Version bumps can be breaking, so they are not auto-applied — review and bump the
affected direct dependency, or add a documented entry to security/managed-overrides.json.
Fixable vulnerabilities (a patched version exists): 3
Known unfixed (monitoring only)
Last updated: run 30521505883.
The daily Security Maintenance scan found vulnerabilities with an available fix.
Version bumps can be breaking, so they are not auto-applied — review and bump the
affected direct dependency, or add a documented entry to
security/managed-overrides.json.Fixable vulnerabilities (a patched version exists): 3
tar7.5.20 → fixed in 7.5.21 (GHSA-r292-9mhp-454m)react-router7.18.1 → fixed in 8.3.0 (GHSA-qwww-vcr4-c8h2)brace-expansion5.0.7 → fixed in 5.0.8 (CVE-2026-14257)Known unfixed (monitoring only)
Last updated: run 30521505883.