fix: upgrade brace-expansion to 5.0.8, 3.0.3, 2.1.3, 1.1.17 (CVE-2026-14257) - #958

Open

anupamme wants to merge 2 commits into

loopbackio:masterfrom

anupamme:fix-repo-loopback-connector-cve-2026-14257-brace-expansion

Commits on Aug 4, 2026

fix: CVE-2026-14257 security vulnerability
anupamme
committed
aa4d92a
fix: remove npm overrides, let semver resolve patched brace-expansion

anupamme
and
claude
committed
8060e92