From 0df091ee4d8ad95e12ab8be575d9f52676607fbf Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Wed, 22 Jul 2026 14:50:02 +0000
Subject: [PATCH] fix: CVE-2026-41242 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package.json |  1 +
 yarn.lock    | 21 +++++++++++++++++++++
 2 files changed, 22 insertions(+)

diff --git a/package.json b/package.json
index 685ada32..3f0c4aa0 100644
--- a/package.json
+++ b/package.json
@@ -37,6 +37,7 @@
     "invariant": "^2.2",
     "lodash": "^4.17.21",
     "prop-types": "^15.8.1",
+    "protobufjs": "7.5.5",
     "react": "19.1.0",
     "react-native": "^0.80.2",
     "react-native-background-fetch": "^4.2.3",
diff --git a/yarn.lock b/yarn.lock
index 896779d0..21b33d9b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6153,6 +6153,7 @@ __metadata:
     lodash: "npm:^4.17.21"
     prettier: "npm:2.8.8"
     prop-types: "npm:^15.8.1"
+    protobufjs: "npm:7.5.5"
     react: "npm:19.1.0"
     react-native: "npm:^0.80.2"
     react-native-background-fetch: "npm:^4.2.3"
@@ -11674,6 +11675,26 @@ __metadata:
   languageName: node
   linkType: hard
 
+"protobufjs@npm:7.5.5":
+  version: 7.5.5
+  resolution: "protobufjs@npm:7.5.5"
+  dependencies:
+    "@protobufjs/aspromise": "npm:^1.1.2"
+    "@protobufjs/base64": "npm:^1.1.2"
+    "@protobufjs/codegen": "npm:^2.0.4"
+    "@protobufjs/eventemitter": "npm:^1.1.0"
+    "@protobufjs/fetch": "npm:^1.1.0"
+    "@protobufjs/float": "npm:^1.0.2"
+    "@protobufjs/inquire": "npm:^1.1.0"
+    "@protobufjs/path": "npm:^1.1.2"
+    "@protobufjs/pool": "npm:^1.1.0"
+    "@protobufjs/utf8": "npm:^1.1.0"
+    "@types/node": "npm:>=13.7.0"
+    long: "npm:^5.0.0"
+  checksum: 10/048898023a38d22f5fc9a1bcf0dcce5cfbcd37fb00753bd72283720eee7e2cb6055b23957542e5bcdc136379af66203a2ddb8d8c39d11f73169bacf07885fedd
+  languageName: node
+  linkType: hard
+
 "protobufjs@npm:^7.2.5":
   version: 7.5.4
   resolution: "protobufjs@npm:7.5.4"