From 8f5af05057265439155c2f9a0804a3e286ce27bb Mon Sep 17 00:00:00 2001
From: William Bezuidenhout <william.bezuidenhout@sourcegraph.com>
Date: Mon, 1 Dec 2025 10:30:43 +0200
Subject: [PATCH] fix: upgrade cross-spawn to 7.0.6 (CVE-2024-21538)

---
 npm-distribution/package.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/npm-distribution/package.json b/npm-distribution/package.json
index f0e44a82bf..e3dcc5f2dd 100644
--- a/npm-distribution/package.json
+++ b/npm-distribution/package.json
@@ -19,6 +19,9 @@
   "dependencies": {
     "tar": "^7.1.0"
   },
+  "overrides": {
+    "cross-spawn": "^7.0.5"
+  },
   "devDependencies": {
     "@types/tar": "6.1.13"
   },