From d8750f5726fe246ea9c00eda274742008cb524e4 Mon Sep 17 00:00:00 2001
From: Kristopher Johnson <kristopher.johnson@ditto.com>
Date: Fri, 17 Apr 2026 16:50:09 -0400
Subject: [PATCH] [Security] Fix dependency vulnerabilities
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- basic-ftp 5.2.0 → 5.3.0 (GHSA-rp42-5vxx-qpwr, GHSA-6v7q-wjvx-w8wg, GHSA-chqc-8p9q-pq6q / CVE-2026-39983) in package-lock.json
- lodash 4.17.23 → 4.18.1 (GHSA-r5fr-rjxr-66jc / CVE-2026-4800) in examples/vite-typescript-example/package-lock.json

Resolves: SPO-633, SPO-503, SPO-498, SPO-464
---
 examples/vite-typescript-example/package-lock.json | 6 +++---
 package-lock.json                                  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/examples/vite-typescript-example/package-lock.json b/examples/vite-typescript-example/package-lock.json
index 1ded845..66b0e45 100644
--- a/examples/vite-typescript-example/package-lock.json
+++ b/examples/vite-typescript-example/package-lock.json
@@ -7895,9 +7895,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
       "dev": true,
       "license": "MIT"
     },
diff --git a/package-lock.json b/package-lock.json
index 0125973..bde2774 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3132,9 +3132,9 @@
       }
     },
     "node_modules/basic-ftp": {
-      "version": "5.2.0",
-      "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.2.0.tgz",
-      "integrity": "sha512-VoMINM2rqJwJgfdHq6RiUudKt2BV+FY5ZFezP/ypmwayk68+NzzAQy4XXLlqsGD4MCzq3DrmNFD/uUmBJuGoXw==",
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.3.0.tgz",
+      "integrity": "sha512-5K9eNNn7ywHPsYnFwjKgYH8Hf8B5emh7JKcPaVjjrMJFQQwGpwowEnZNEtHs7DfR7hCZsmaK3VA4HUK0YarT+w==",
       "dev": true,
       "license": "MIT",
       "engines": {