From 7e3ce7534b88e9272a61620be8d80c63f9cf0906 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sat, 15 Aug 2026 09:16:06 +0000
Subject: [PATCH] fix: CVE-2026-4800 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 7 ++++---
 package.json      | 3 +++
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ee0ce90..acfce2d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1653,9 +1653,10 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
+      "version": "4.18.0",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.0.tgz",
+      "integrity": "sha512-l1mfj2atMqndAHI3ls7XqPxEjV2J9ZkcNyHpoZA3r2T1LLwDB69jgkMWh71YKwhBbK0G2f4WSn05ahmQXVxupA==",
+      "deprecated": "Bad release. Please use lodash@4.17.21 instead.",
       "license": "MIT"
     },
     "node_modules/lodash-es": {
diff --git a/package.json b/package.json
index 60bb994..835dfb2 100644
--- a/package.json
+++ b/package.json
@@ -27,5 +27,8 @@
   },
   "devDependencies": {
     "@arkweid/lefthook": "^0.7.6"
+  },
+  "overrides": {
+    "lodash": "4.18.0"
   }
 }