Vulnerability with brace-expansion

openapi-typescript version

7.13.0

Node.js version

22.22.0

OS + version

Ubuntu 24.04

Description

with command yarn why brace-expansion it shows up there is an older version of brace-expansion and It is reported as a security vulnerability in scans

=> Found "[email protected]" info Has been hoisted to "brace-expansion" info Reasons this module exists

• Hoisted from "openapi-typescript#@redocly#openapi-core#minimatch#brace-expansion"

Reproduction

[email protected] has security vulnerability. check with your package manager to see what version uses it

Expected result

The latest openapi-typescript should not pull a dependency with a known high-severity vulnerability.

Required

• My OpenAPI schema is valid and passes the Redocly validator (npx @redocly/cli@latest lint)

Extra

• I’m willing to open a PR (see CONTRIBUTING.md)