From 0dd941630f0c016429f13ad37eab0cf927e6f35c Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Fri, 24 Jul 2026 00:10:44 +0000
Subject: [PATCH] fix: CVE-2026-42043 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package.json | 4 +++-
 yarn.lock    | 9 +++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 9600e4d0f..8ab4b620d 100644
--- a/package.json
+++ b/package.json
@@ -14,11 +14,13 @@
   "dependencies": {
     "@adguard/hostlist-compiler": "^2.1.0",
     "@sindresorhus/slugify": "^3.0.0",
+    "axios": "1.15.1",
     "fs-extra": "^11.3.6"
   },
   "resolutions": {
     "axios": "^1.15.0",
     "jsonpointer": "^5.0.0",
     "better-ajv-errors": "^1.1.2"
-  }
+  },
+  "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
 }
diff --git a/yarn.lock b/yarn.lock
index 50e5bffe3..77b01ca14 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -113,6 +113,15 @@ asynckit@^0.4.0:
   resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
   integrity sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==
 
+axios@1.15.1:
+  version "1.15.1"
+  resolved "https://registry.yarnpkg.com/axios/-/axios-1.15.1.tgz#075420b785da8adbdf545785b69f90c926b28542"
+  integrity sha512-WOG+Jj8ZOvR0a3rAn+Tuf1UQJRxw5venr6DgdbJzngJE3qG7X0kL83CZGpdHMxEm+ZK3seAbvFsw4FfOfP9vxg==
+  dependencies:
+    follow-redirects "^1.15.11"
+    form-data "^4.0.5"
+    proxy-from-env "^2.1.0"
+
 axios@1.6.2, axios@^1.15.0:
   version "1.15.0"
   resolved "https://registry.yarnpkg.com/axios/-/axios-1.15.0.tgz#0fcee91ef03d386514474904b27863b2c683bf4f"