From c130f0e6b4a432f472edb57fe2aad3cdbc06282b Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 19 Aug 2026 18:23:50 +0000
Subject: [PATCH] fix: CVE-2026-59873 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 packages/client/package.json |  3 ++-
 packages/client/yarn.lock    | 29 ++++++++++++++---------------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/packages/client/package.json b/packages/client/package.json
index eb4def8c1..e7168c6fc 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -19,7 +19,8 @@
     "prosemirror-model": "1.19.0",
     "prosemirror-state": "1.4.3",
     "prosemirror-transform": "1.7.1",
-    "prosemirror-view": "1.30.2"
+    "prosemirror-view": "1.30.2",
+    "tar": "7.5.21"
   },
   "dependencies": {
     "@ant-design/icons": "^6.2.5",
diff --git a/packages/client/yarn.lock b/packages/client/yarn.lock
index ec301cd9d..abb04b63b 100644
--- a/packages/client/yarn.lock
+++ b/packages/client/yarn.lock
@@ -5969,6 +5969,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"minizlib@npm:^3.1.0":
+  version: 3.1.0
+  resolution: "minizlib@npm:3.1.0"
+  dependencies:
+    minipass: "npm:^7.1.2"
+  checksum: 10c0/5aad75ab0090b8266069c9aabe582c021ae53eb33c6c691054a13a45db3b4f91a7fb1bd79151e6b4e9e9a86727b522527c0a06ec7d45206b745d54cd3097bcec
+  languageName: node
+  linkType: hard
+
 "mj-context-menu@npm:^0.6.1":
   version: 0.6.1
   resolution: "mj-context-menu@npm:0.6.1"
@@ -5976,15 +5985,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"mkdirp@npm:^3.0.1":
-  version: 3.0.1
-  resolution: "mkdirp@npm:3.0.1"
-  bin:
-    mkdirp: dist/cjs/src/bin.js
-  checksum: 10c0/9f2b975e9246351f5e3a40dcfac99fcd0baa31fbfab615fe059fb11e51f10e4803c63de1f384c54d656e4db31d000e4767e9ef076a22e12a641357602e31d57d
-  languageName: node
-  linkType: hard
-
 "moment-timezone@npm:^0.5.34":
   version: 0.5.45
   resolution: "moment-timezone@npm:0.5.45"
@@ -7988,17 +7988,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:^7.4.3":
-  version: 7.4.3
-  resolution: "tar@npm:7.4.3"
+"tar@npm:7.5.21":
+  version: 7.5.21
+  resolution: "tar@npm:7.5.21"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
-    minizlib: "npm:^3.0.1"
-    mkdirp: "npm:^3.0.1"
+    minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/d4679609bb2a9b48eeaf84632b6d844128d2412b95b6de07d53d8ee8baf4ca0857c9331dfa510390a0727b550fd543d4d1a10995ad86cdf078423fbb8d99831d
+  checksum: 10c0/bce0e51692356078e6f6a909d5c93f5b4c099c097ffea19b1b1bf10385539a429baba26bca59aabbace68c4519d16f2f1c07afe7eaab55876a449a032480fabc
   languageName: node
   linkType: hard