CVE-2026-25547

Author: nhsd-david-wass

package-lock.json

@@ -52,12 +52,11 @@
   "name": "nhs-notify-supplier-api",
   "overrides": {
     "fast-xml-parser": "^5.3.4",
+    "@isaacs/brace-expansion": "^5.0.1",
     "pretty-format": {
       "react-is": "19.0.0"
     },
-    "react": "^19.0.0",
-    "fast-xml-parser": "^5.3.4"
-
+    "react": "^19.0.0"
   },
   "scripts": {
     "build": "npm run bundle-oas && npm run generate --buildver=$npm_config_buildver",