Vulnerabilities in 1.1.16 version of this package

[Adu2120]

I'm blocked in my daily work due to vulnerability in this package version 1.1.16. Please fix those so I can resume my work.

[voitovich-maria]

https://advisories.gitlab.com/pkg/npm/brace-expansion/CVE-2026-14257/
GHSA-mh99-v99m-4gvg
GHSA-mh99-v99m-4gvg
https://nvd.nist.gov/vuln/detail/CVE-2026-14257
https://osv.dev/vulnerability/DEBIAN-CVE-2026-14257
https://security-tracker.debian.org/tracker/CVE-2026-14257
https://www.cve.org/CVERecord?id=CVE-2026-14257

[juliangruber]

I'm blocked in my daily work due to vulnerability in this package version 1.1.16. Please fix those so I can resume my work.

I'm not being paid to maintain this and the v1 release line. Happy to receive contributions or donations, to aid the process.

I'm working on the fix, but at my own tempo.

[Adu2120]

I'm blocked in my daily work due to vulnerability in this package version 1.1.16. Please fix those so I can resume my work.

I'm not being paid to maintain this and the v1 release line. Happy to receive contributions or donations, to aid the process.

I'm working on the fix, but at my own tempo.

@juliangruber
apologies if my previous message came across as harsh; that wasn’t intended.

[juliangruber]

PR #129