Regenerate CVE appendix for e917c21

Author: github-actions[bot]

docs/security-audit-cve-appendix.md

@@ -26,11 +26,15 @@
 
 | Field | Value |
 |---|---|
-| Release | `lockfile-commit` = `61ebf2a47d41806f39602528e8476cb433dcde5c` |
+| Release | `lockfile-commit` = `e917c2122af28c1fbb7aa8013373d696f6d583a3` |
 | Lockfile | `pnpm-lock.yaml` |
-| Lockfile sha256 | `a6fa36d1a57d793a5d315f963a365a769422cc5bc842a49228cf5bcb53a84de1` |
+| Lockfile sha256 | `69e8777986699c8f5b99b5fb5940a669c6c682b065251baf45c122d0e91e7d92` |
 | Generator | `scripts/regen-cve-appendix.mjs` (parser `scripts/lib/pnpm-audit-parser.mjs`) |
 | pnpm major (pinned) | `10` |
-| Total advisories | 0 (0 critical / 0 high / 0 moderate / 0 low / 0 info) |
+| Total advisories | 3 (0 critical / 0 high / 1 moderate / 2 low / 0 info) |
 
-_No advisories surfaced by `pnpm audit --json --audit-level=info` against this lockfile._
+| Severity | ID | Package | Version | Dep path | Title | Audit ledger |
+|---|---|---|---|---|---|---|
+| moderate | [CVE-2026-48988](https://github.com/advisories/GHSA-6v5v-wf23-fmfq) | `markdown-it` | `14.1.1` | `lib__api-spec>orval>typedoc>markdown-it` | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations | — |
+| low | [CVE-2026-12590](https://github.com/advisories/GHSA-v422-hmwv-36x6) | `body-parser` | `2.2.2` | `artifacts__api-server>express>body-parser` | body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement | — |
+| low | [CVE-2026-49356](https://github.com/advisories/GHSA-4x5r-pxfx-6jf8) | `@babel/core` | `7.29.0` | `artifacts__biometric-demo-video>@vitejs/plugin-react>@babel/core` | @babel/core: Arbitrary File Read via sourceMappingURL Comment | — |