From f88991805bcebfd2aa5766353ec19d577bbeb5a3 Mon Sep 17 00:00:00 2001
From: Raphael Tony <raphael.tony@intugle.ai>
Date: Tue, 30 Jun 2026 13:40:24 +0530
Subject: [PATCH] fix(security): resolve uuid CVE via npm override to v11.1.1

- Add uuid ^11.1.1 override in docsite/package.json
- Update package-lock.json: uuid 8.3.2 -> 11.1.1
- Resolves: Missing buffer bounds check in v3/v5/v6 when buf is provided
- Verified: npm audit passes uuid check, build & typecheck pass
---
 docsite/package-lock.json | 12 ++++++++----
 docsite/package.json      |  3 ++-
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/docsite/package-lock.json b/docsite/package-lock.json
index 2d43286..131e08d 100644
--- a/docsite/package-lock.json
+++ b/docsite/package-lock.json
@@ -18488,12 +18488,16 @@
       }
     },
     "node_modules/uuid": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-      "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
+      "version": "11.1.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
+      "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
       "license": "MIT",
       "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "dist/esm/bin/uuid"
       }
     },
     "node_modules/value-equal": {
diff --git a/docsite/package.json b/docsite/package.json
index 141c201..3f3b8b8 100644
--- a/docsite/package.json
+++ b/docsite/package.json
@@ -40,7 +40,8 @@
     "minimatch": "^3.1.4",
     "ajv": "^8.18.0",
     "qs": "^6.14.2",
-    "webpack": "^5.104.1"
+    "webpack": "^5.104.1",
+    "uuid": "^11.1.1"
   },
   "browserslist": {
     "production": [