From 4007334a3c2197ef5eda0aaf37e2132718183b61 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 29 Jul 2026 07:39:44 +0000
Subject: [PATCH] fix: GHSA-8r6m-32jq-jx6q security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 17 ++++++++++-------
 package.json      |  5 ++++-
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e0f019119a..7340918c1c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,6 +10,9 @@
       "workspaces": [
         "deploy/profiles/*"
       ],
+      "dependencies": {
+        "fast-xml-parser": "^5.10.1"
+      },
       "devDependencies": {
         "concurrently": "^8.2.2",
         "miniflare": "^4.20260708.1",
@@ -2429,9 +2432,9 @@
       }
     },
     "node_modules/@nodable/entities": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/@nodable/entities/-/entities-2.2.0.tgz",
-      "integrity": "sha512-9uGyhaQavEUMC8AIddIjau4NsnsXhou+j5sBAGojCM1oxmQpVKTWR/9JxABD6UAv12vpIms55fPZKFQEhG6uBg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@nodable/entities/-/entities-3.0.0.tgz",
+      "integrity": "sha512-8L9xFeTYKhm49xfIypoe2W5wV1m/3Z58kT+7kR9A8OyFxcPduI4VmxaUMQyKYrRjUoLLSXv6EKKID5Tvj9cUVw==",
       "funding": [
         {
           "type": "github",
@@ -4420,9 +4423,9 @@
       }
     },
     "node_modules/fast-xml-parser": {
-      "version": "5.10.0",
-      "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.10.0.tgz",
-      "integrity": "sha512-SLhnTEqE5QpJHq/6zl9bsmImEP2adv+y6Wy+cJa7nVTRzQh1OZfCe9k29M5xN74LWnu0xa1zrUrq3KnOKl92Fg==",
+      "version": "5.10.1",
+      "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.10.1.tgz",
+      "integrity": "sha512-IEMIf7298kXuZSRFoGfMYrl7is8LpavODgbNz1cwIudv7KwVFnuU+UsMporfq6PD6aXSlawZlARiA3UywCTfMw==",
       "funding": [
         {
           "type": "github",
@@ -4431,7 +4434,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "@nodable/entities": "^2.2.0",
+        "@nodable/entities": "^3.0.0",
         "fast-xml-builder": "^1.2.0",
         "is-unsafe": "^2.0.0",
         "path-expression-matcher": "^1.6.2",
diff --git a/package.json b/package.json
index ece68e116b..d5b144fe29 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
     "deploy:worker": "node deploy/worker/generate-routes.js && npx wrangler deploy --config deploy/worker/wrangler.toml"
   },
   "overrides": {
-    "fast-xml-parser": "^5.3.6"
+    "fast-xml-parser": "5.10.1"
   },
   "devDependencies": {
     "concurrently": "^8.2.2",
@@ -23,5 +23,8 @@
     "mocha": "^8.1.3",
     "wait-on": "^7.2.0",
     "wrangler": "^4.24.0"
+  },
+  "dependencies": {
+    "fast-xml-parser": "^5.10.1"
   }
 }