From 62b5acdbbad5677e7a8ef264f6db173fed0bd1fe Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Sun, 26 Jul 2026 03:40:26 +0000
Subject: [PATCH] fix: CVE-2026-14257 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 15 +++++++--------
 package.json      |  1 +
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index be198d5..a6e5de3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "attendance",
-  "version": "1.40.0",
+  "version": "1.41.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "attendance",
-      "version": "1.40.0",
+      "version": "1.41.2",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "@nextcloud/axios": "^2.6.0",
@@ -15,6 +15,7 @@
         "@nextcloud/l10n": "^3.4.1",
         "@nextcloud/router": "^3.1.0",
         "@nextcloud/vue": "^9.9.0",
+        "brace-expansion": "^5.0.8",
         "canvas-confetti": "^1.9.4",
         "date-fns": "^4.4.0",
         "date-fns-tz": "^3.2.0",
@@ -4093,7 +4094,6 @@
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
       "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": "18 || 20 || >=22"
@@ -4276,16 +4276,15 @@
       "license": "ISC"
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
-      "dev": true,
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz",
+      "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/braces": {
diff --git a/package.json b/package.json
index 99e93aa..dd0c1d1 100644
--- a/package.json
+++ b/package.json
@@ -31,6 +31,7 @@
     "@nextcloud/l10n": "^3.4.1",
     "@nextcloud/router": "^3.1.0",
     "@nextcloud/vue": "^9.9.0",
+    "brace-expansion": "^5.0.8",
     "canvas-confetti": "^1.9.4",
     "date-fns": "^4.4.0",
     "date-fns-tz": "^3.2.0",