diff --git a/package.json b/package.json
index ffff96df..79a6f820 100644
--- a/package.json
+++ b/package.json
@@ -142,7 +142,7 @@
       "elliptic@<=6.6.0": ">=6.6.1",
       "@babel/helpers@<7.26.10": ">=7.29.2",
       "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.6",
-      "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=2.0.3",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2",
       "pbkdf2@<=3.1.2": ">=3.1.5",
       "sha.js@<=2.4.11": ">=2.4.12",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4af021c9..e5f38357 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10,7 +10,7 @@ overrides:
   elliptic@<=6.6.0: '>=6.6.1'
   '@babel/helpers@<7.26.10': '>=7.29.2'
   cross-spawn@>=7.0.0 <7.0.5: '>=7.0.6'
-  brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12'
+  brace-expansion@>=1.0.0 <=1.1.11: '>=2.0.3'
   brace-expansion@>=2.0.0 <=2.0.1: '>=2.0.2'
   pbkdf2@<=3.1.2: '>=3.1.5'
   sha.js@<=2.4.11: '>=2.4.12'