From adf38f62b362b24543c66df58bc5cc9842815278 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Fri, 21 Aug 2026 18:43:37 +0000
Subject: [PATCH] fix: CVE-2026-59873 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 6 +++---
 package.json      | 5 ++++-
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 107df25828..2008758b98 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16429,9 +16429,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.16",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
-      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
+      "version": "7.5.21",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.21.tgz",
+      "integrity": "sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index 4157a0938c..612065b896 100644
--- a/package.json
+++ b/package.json
@@ -145,5 +145,8 @@
     "not Safari >= 0",
     "not KaiOS >= 0",
     "not Samsung >= 0"
-  ]
+  ],
+  "overrides": {
+    "tar": "7.5.21"
+  }
 }