From 1b643b427b97ea5f7f75fbd8fa8e3816b2a3934b Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sat, 10 Oct 2026 10:09:09 +0000
Subject: [PATCH] fix: CVE-2026-90711 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package.json | 3 ++-
 yarn.lock    | 8 ++++----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index f3d111d3b..42e2673a0 100644
--- a/package.json
+++ b/package.json
@@ -159,6 +159,7 @@
   },
   "packageManager": "yarn@4.17.1",
   "resolutions": {
-    "postcss": "8.5.12"
+    "postcss": "8.5.12",
+    "proxy-addr": "2.0.8"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index af0ab8116..4c2329e20 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11397,13 +11397,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"proxy-addr@npm:^2.0.7":
-  version: 2.0.7
-  resolution: "proxy-addr@npm:2.0.7"
+"proxy-addr@npm:2.0.8":
+  version: 2.0.8
+  resolution: "proxy-addr@npm:2.0.8"
   dependencies:
     forwarded: "npm:0.2.0"
     ipaddr.js: "npm:1.9.1"
-  checksum: 10/f24a0c80af0e75d31e3451398670d73406ec642914da11a2965b80b1898ca6f66a0e3e091a11a4327079b2b268795f6fa06691923fef91887215c3d0e8ea3f68
+  checksum: 10/6922b732c5625a9ba174c053bf3a750a80c87f19b7c62919f88ff01834eb80e2467834cfa72fc48b3a7ed6b3d18daadf773f6efb21db1c5fcc76d784509fcf1f
   languageName: node
   linkType: hard