### Is there an existing issue for this? - [x] I have searched the existing issues ### This issue exists in the latest npm version - [x] I am using the latest npm ### Current Behavior picomatch 4.0.3 has CVE CVE-2026-33671 https://nvd.nist.gov/vuln/detail/CVE-2026-33671 ### Expected Behavior _No response_ ### Steps To Reproduce ### Environment - npm: 11.12.1
Is there an existing issue for this?
This issue exists in the latest npm version
Current Behavior
picomatch 4.0.3 has CVE CVE-2026-33671
https://nvd.nist.gov/vuln/detail/CVE-2026-33671
Expected Behavior
No response
Steps To Reproduce
Environment