Transitive vuln: brace-expansion@2.0.2 via @vue/language-cor -> minimatch

[AbhaysinghBhosale]

Describe the bug

Vulnerability reported in vite-plugin-dts@4.5.4 which is coming from transitive dependancy "brace-expansion"

└─┬ vite-plugin-dts@4.5.4
└─┬ @vue/language-core@2.2.0
└─┬ minimatch@9.0.5
└── brace-expansion@2.0.2

Reproduction

https://security.snyk.io/package/npm/brace-expansion

Steps to reproduce

No response

System Info

Browser Chrome
Package - vite-plugin-dts@4.5.4

Validations

• Read the FAQ.
• Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
• The provided reproduction is a minimal reproducible example of the bug.