From 3cbd4340d48e2ad3f35efe5536a22f3eef6534b1 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sun, 23 Aug 2026 21:22:38 +0000
Subject: [PATCH] fix: CVE-2021-43138 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 26 ++++++++------------------
 package.json      |  7 ++++++-
 2 files changed, 14 insertions(+), 19 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 292cecbc73..eddb2d2007 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -40,7 +40,7 @@
         "@types/express": "^5.0.3",
         "acorn": "^8.14.1",
         "acorn-walk": "^8.3.4",
-        "async": "^3.2.3",
+        "async": "^3.2.2",
         "axios": "^1.18.1",
         "babel-plugin-styled-components": "^1.13.2",
         "bcryptjs": "^2.4.3",
@@ -13801,9 +13801,9 @@
       }
     },
     "node_modules/async": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
-      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+      "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g==",
       "license": "MIT"
     },
     "node_modules/async-function": {
@@ -20904,11 +20904,6 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
-    "node_modules/htmlhint/node_modules/async": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.2.0.tgz",
-      "integrity": "sha512-TR2mEZFVOj2pLStYxLht7TyfuRzaydfpxr3k9RpHIzMgw7A64dzsdqCxH1WJyQdoe8T10nDXd9wnEigmiuHIZw=="
-    },
     "node_modules/htmlhint/node_modules/chalk": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.0.tgz",
@@ -45163,9 +45158,9 @@
       "integrity": "sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ=="
     },
     "async": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
-      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA=="
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+      "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g=="
     },
     "async-function": {
       "version": "1.0.0",
@@ -50258,7 +50253,7 @@
       "integrity": "sha512-ciCpeMEGZ7CbfK+MgK8ykV+wzUHz5he06mAiq8OQLuYN6pxFxZDAhwPwByirOYwdF3GV2M4s7spq2A/g/XMncQ==",
       "requires": {
         "@types/node-fetch": "^2.5.12",
-        "async": "3.2.0",
+        "async": "3.2.2",
         "chalk": "4.1.0",
         "commander": "5.1.0",
         "glob": "7.1.7",
@@ -50276,11 +50271,6 @@
             "color-convert": "^2.0.1"
           }
         },
-        "async": {
-          "version": "3.2.0",
-          "resolved": "https://registry.npmjs.org/async/-/async-3.2.0.tgz",
-          "integrity": "sha512-TR2mEZFVOj2pLStYxLht7TyfuRzaydfpxr3k9RpHIzMgw7A64dzsdqCxH1WJyQdoe8T10nDXd9wnEigmiuHIZw=="
-        },
         "chalk": {
           "version": "4.1.0",
           "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.0.tgz",
diff --git a/package.json b/package.json
index ecd5673884..a2a30d87e9 100644
--- a/package.json
+++ b/package.json
@@ -249,7 +249,7 @@
     "@types/express": "^5.0.3",
     "acorn": "^8.14.1",
     "acorn-walk": "^8.3.4",
-    "async": "^3.2.3",
+    "async": "^3.2.2",
     "axios": "^1.18.1",
     "babel-plugin-styled-components": "^1.13.2",
     "bcryptjs": "^2.4.3",
@@ -344,5 +344,10 @@
     "webpack": "^5.94.0",
     "webpack-dev-middleware": "^5.3.4",
     "xhr": "^2.6.0"
+  },
+  "overrides": {
+    "htmlhint": {
+      "async": "3.2.2"
+    }
   }
 }