From 04802a50dbc14b5220c7833fbd880f10f3728df6 Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Wed, 22 Jul 2026 14:22:26 +0000
Subject: [PATCH] fix: CVE-2025-64756 security vulnerability

Automated dependency upgrade by OrbisAI Security

Signed-off-by: orbisai0security <mediratta@gmail.com>
---
 src/mail/package.json |  1 +
 src/mail/yarn.lock    | 12 ++++++++++++
 2 files changed, 13 insertions(+)

diff --git a/src/mail/package.json b/src/mail/package.json
index 516c57256..cf0c0280f 100644
--- a/src/mail/package.json
+++ b/src/mail/package.json
@@ -5,6 +5,7 @@
   "type": "module",
   "dependencies": {
     "@html-to/text-cli": "0.5.4",
+    "glob": "10.5.0",
     "mjml": "4.17.0"
   },
   "private": true,
diff --git a/src/mail/yarn.lock b/src/mail/yarn.lock
index 551ee0a43..4d194aaf3 100644
--- a/src/mail/yarn.lock
+++ b/src/mail/yarn.lock
@@ -397,6 +397,18 @@ glob-parent@~5.1.2:
   dependencies:
     is-glob "^4.0.1"
 
+glob@10.5.0:
+  version "10.5.0"
+  resolved "https://registry.yarnpkg.com/glob/-/glob-10.5.0.tgz#8ec0355919cd3338c28428a23d4f24ecc5fe738c"
+  integrity sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==
+  dependencies:
+    foreground-child "^3.1.0"
+    jackspeak "^3.1.2"
+    minimatch "^9.0.4"
+    minipass "^7.1.2"
+    package-json-from-dist "^1.0.0"
+    path-scurry "^1.11.1"
+
 glob@^10.3.10, glob@^10.3.3:
   version "10.4.5"
   resolved "https://registry.yarnpkg.com/glob/-/glob-10.4.5.tgz#f4d9f0b90ffdbab09c9d77f5f29b4262517b0956"