From cf31200d270fd6fb1ba2b9a53aefb2c598008fff Mon Sep 17 00:00:00 2001
From: Atharva Shinde <atshinde@redhat.com>
Date: Thu, 20 Aug 2026 16:14:50 +0530
Subject: [PATCH] Fix CVE-2026-69153 and CVE-2026-45623

Signed-off-by: Atharva Shinde <atshinde@redhat.com>
---
 frontend/package.json |  2 +-
 frontend/yarn.lock    | 22 +++++++++++-----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/frontend/package.json b/frontend/package.json
index 35dc58eff4c..9ce394d8487 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -326,7 +326,7 @@
     "minimist": "1.2.5",
     "ua-parser-js": "^0.7.24",
     "glob-parent": "^5.1.2",
-    "postcss": "^8.2.13",
+    "postcss": "^8.5.23",
     "async": "^3.2.5",
     "minimatch@^3.0.2": "^3.1.3",
     "minimatch@^3.0.3": "^3.1.3",
diff --git a/frontend/yarn.lock b/frontend/yarn.lock
index 3f1f3ed0f77..03b6ae2a516 100644
--- a/frontend/yarn.lock
+++ b/frontend/yarn.lock
@@ -19282,14 +19282,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"postcss@npm:^8.2.13":
-  version: 8.4.31
-  resolution: "postcss@npm:8.4.31"
+"postcss@npm:^8.5.23":
+  version: 8.5.26
+  resolution: "postcss@npm:8.5.26"
   dependencies:
-    nanoid: "npm:^3.3.6"
-    picocolors: "npm:^1.0.0"
-    source-map-js: "npm:^1.0.2"
-  checksum: 10c0/748b82e6e5fc34034dcf2ae88ea3d11fd09f69b6c50ecdd3b4a875cfc7cdca435c958b211e2cb52355422ab6fccb7d8f2f2923161d7a1b281029e4a913d59acf
+    nanoid: "npm:^3.3.17"
+    picocolors: "npm:^1.1.1"
+    source-map-js: "npm:^1.2.1"
+  checksum: 10c0/2bdafc00d96bd57b6649a52e458864a4bf58ee56cfdbe4aea1472b5cccc127e6c1ad653bd0bec50d211e650eb0b9270c80e1e72aff2e2fa40d9e7363234d6e43
   languageName: node
   linkType: hard
 
@@ -21807,10 +21807,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"source-map-js@npm:^1.0.2":
-  version: 1.0.2
-  resolution: "source-map-js@npm:1.0.2"
-  checksum: 10c0/32f2dfd1e9b7168f9a9715eb1b4e21905850f3b50cf02cf476e47e4eebe8e6b762b63a64357896aa29b37e24922b4282df0f492e0d2ace572b43d15525976ff8
+"source-map-js@npm:^1.2.1":
+  version: 1.2.1
+  resolution: "source-map-js@npm:1.2.1"
+  checksum: 10c0/7bda1fc4c197e3c6ff17de1b8b2c20e60af81b63a52cb32ec5a5d67a20a7d42651e2cb34ebe93833c5a2a084377e17455854fee3e21e7925c64a51b6a52b0faf
   languageName: node
   linkType: hard