Vulnerability with brace-expansion

[umutcantopal]

openapi-typescript version

7.13.0

Node.js version

22.22.0

OS + version

Ubuntu 24.04

Description

with command yarn why brace-expansion it shows up there is an older version of brace-expansion and It is reported as a security vulnerability in scans

=> Found "brace-expansion@2.1.2"
info Has been hoisted to "brace-expansion"
info Reasons this module exists

• Hoisted from "openapi-typescript#@Redocly#openapi-core#minimatch#brace-expansion"

Reproduction

brace-expansion@2.1.2 has security vulnerability. check with your package manager to see what version uses it

Expected result

The latest openapi-typescript should not pull a dependency with a known high-severity vulnerability.

Required

• My OpenAPI schema is valid and passes the Redocly validator (npx @redocly/cli@latest lint)

Extra

• I’m willing to open a PR (see CONTRIBUTING.md)