From 500d4f6972d4e6f00d94777a085658789b269b0d Mon Sep 17 00:00:00 2001
From: German Parente <gparente@redhat.com>
Date: Mon, 10 Aug 2026 18:27:25 +0200
Subject: [PATCH] Fix for OCPBUGS-101820: CVE-2026-69152

---
 dynamic-demo-plugin/package.json |  3 ++-
 frontend/package.json            |  4 +++-
 frontend/yarn.lock               | 16 ++++++++--------
 3 files changed, 13 insertions(+), 10 deletions(-)

diff --git a/dynamic-demo-plugin/package.json b/dynamic-demo-plugin/package.json
index 550b38532ac..ed398e49391 100644
--- a/dynamic-demo-plugin/package.json
+++ b/dynamic-demo-plugin/package.json
@@ -81,7 +81,8 @@
   "resolutions": {
     "minimatch@^3.0.2": "^3.1.3",
     "minimatch@^3.0.4": "^3.1.3",
-    "minimatch@^3.1.1": "^3.1.3"
+    "minimatch@^3.1.1": "^3.1.3",
+    "brace-expansion@^1.1.7": "1.1.18"
   },
   "packageManager": "yarn@4.12.0"
 }
diff --git a/frontend/package.json b/frontend/package.json
index 82e42badee5..be69c55b5a1 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -370,7 +370,9 @@
     "minimatch@^3.0.3": "^3.1.3",
     "minimatch@^3.0.4": "^3.1.3",
     "minimatch@3.0.4": "^3.1.3",
-    "minimatch@^3.1.1": "^3.1.3"
+    "minimatch@^3.1.1": "^3.1.3",
+    "brace-expansion@^1.1.7": "1.1.18",
+    "brace-expansion@^5.0.2": "5.0.9"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,json,gql,graphql}": "eslint --color --fix"
diff --git a/frontend/yarn.lock b/frontend/yarn.lock
index 209f7a7eef9..99f5cccf87b 100644
--- a/frontend/yarn.lock
+++ b/frontend/yarn.lock
@@ -6723,22 +6723,22 @@ __metadata:
   languageName: node
   linkType: hard
 
-"brace-expansion@npm:^1.1.7":
-  version: 1.1.11
-  resolution: "brace-expansion@npm:1.1.11"
+"brace-expansion@npm:1.1.18":
+  version: 1.1.18
+  resolution: "brace-expansion@npm:1.1.18"
   dependencies:
     balanced-match: "npm:^1.0.0"
     concat-map: "npm:0.0.1"
-  checksum: 10c0/695a56cd058096a7cb71fb09d9d6a7070113c7be516699ed361317aca2ec169f618e28b8af352e02ab4233fb54eb0168460a40dc320bab0034b36ab59aaad668
+  checksum: 10c0/3432c18a9e2ebf94162d4effb62198bd0adea06a9f332b2c0188df5d5e30b1e51ea3c848b6608e47d0b857ebe1ea5b3888ed3326dd3c4f6f9645c94153cf9c14
   languageName: node
   linkType: hard
 
-"brace-expansion@npm:^5.0.2":
-  version: 5.0.3
-  resolution: "brace-expansion@npm:5.0.3"
+"brace-expansion@npm:5.0.9":
+  version: 5.0.9
+  resolution: "brace-expansion@npm:5.0.9"
   dependencies:
     balanced-match: "npm:^4.0.2"
-  checksum: 10c0/e474d300e581ec56851b3863ff1cf18573170c6d06deb199ccbd03b2119c36975f6ce2abc7b770f5bebddc1ab022661a9fea9b4d56f33315d7bef54d8793869e
+  checksum: 10c0/3dea38884a1c3c8b1c9c44a7402a0c76fca460f70cffb3127242b0b4cbf4472019e022ade021eec44838ff19f1dac2625dfd11dd459d7e1e055b0698a8d52fec
   languageName: node
   linkType: hard