Security: Fix 1 vulnerable package

[razorgupta]

Security Updates

This PR fixes security vulnerabilities found by Semgrep SCA.

✅ All packages validated for:

• End of Life (EOL) status
• Supply chain attack risks
• Version stability (7-day cool-down or n-1 fallback)
• Peer dependency compatibility

⚠️ Action Required:

1. Run yarn install or npm install to regenerate lock file with fixed versions
2. Run your build (yarn build / npm run build) to verify it compiles
3. Run your test suite to verify compatibility
4. Test in staging before merging to production

Updated Packages

NPM:

• vm2: transitive → 3.10.0

🔐 Vulnerabilities Fixed

• CVE-2023-37466

📋 Semgrep Findings Addressed

Semgrep ID	Link
148862075	View in Semgrep

Changes Made

• Updated dependency files with secure versions
• Regenerated lock files

---

This PR was created automatically by Security Bot
Please review and test before merging