From 85ee4f15be35d467ff30d1057956730aa3f19689 Mon Sep 17 00:00:00 2001
From: Anupam Mediratta <mediratta@gmail.com>
Date: Tue, 27 Oct 2026 10:08:42 +0530
Subject: [PATCH] fix: CVE-2026-67213 security vulnerability (#552)

Automated dependency upgrade by OrbisAI Security
---
 web/package-lock.json | 6 +++---
 web/package.json      | 3 +++
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/web/package-lock.json b/web/package-lock.json
index 95322fb8..307a3105 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -3112,9 +3112,9 @@
       "license": "MIT"
     },
     "node_modules/nanoid": {
-      "version": "3.3.11",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
-      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "funding": [
         {
           "type": "github",
diff --git a/web/package.json b/web/package.json
index 984b6028..2cb83cdb 100644
--- a/web/package.json
+++ b/web/package.json
@@ -34,5 +34,8 @@
     "@types/react-dom": "^19",
     "tailwindcss": "^4",
     "typescript": "^5"
+  },
+  "overrides": {
+    "nanoid": "3.3.18"
   }
 }