From 6626176273b83ae4f5dcd3373d0e53089b9b6c02 Mon Sep 17 00:00:00 2001
From: Vikram Raj <vikrmrj@gmail.com>
Date: Fri, 17 Jul 2026 14:34:11 +0530
Subject: [PATCH] CVE-2026-59869 bump js-yaml

---
 frontend/package.json |  2 +-
 frontend/yarn.lock    | 14 +++++++++++++-
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/frontend/package.json b/frontend/package.json
index 4f651617414..b5a344a5060 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -178,7 +178,7 @@
     "immutable": "^3.8.3",
     "istextorbinary": "^9.5.0",
     "js-base64": "^3.7.7",
-    "js-yaml": "^3.13.1",
+    "js-yaml": "^3.15.0",
     "json-schema": "^0.3.0",
     "jsonpath-plus": "^10.3.0",
     "lodash-es": "^4.18.1",
diff --git a/frontend/yarn.lock b/frontend/yarn.lock
index 8577766d708..dd0b37ac08b 100644
--- a/frontend/yarn.lock
+++ b/frontend/yarn.lock
@@ -15334,6 +15334,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"js-yaml@npm:^3.15.0":
+  version: 3.15.0
+  resolution: "js-yaml@npm:3.15.0"
+  dependencies:
+    argparse: "npm:^1.0.7"
+    esprima: "npm:^4.0.0"
+  bin:
+    js-yaml: bin/js-yaml.js
+  checksum: 10c0/ca966bd354ac5b1b7a4694ebdba46526796aa3a6a99529fa540af2abf85918bd155a50ccc0166b413130a00622999973754458ec01e7095bc902177bfdbd5b64
+  languageName: node
+  linkType: hard
+
 "js-yaml@npm:^4.1.0":
   version: 4.1.0
   resolution: "js-yaml@npm:4.1.0"
@@ -18299,7 +18311,7 @@ __metadata:
     jest-resolve: "npm:^26.4.0"
     jest-transform-graphql: "npm:^2.1.0"
     js-base64: "npm:^3.7.7"
-    js-yaml: "npm:^3.13.1"
+    js-yaml: "npm:^3.15.0"
     json-schema: "npm:^0.3.0"
     jsonpath-plus: "npm:^10.3.0"
     lint-staged: "npm:^10.2.2"