confetti (>=4.0.0-rc.0, <=4.1.4) potentially affected by CVE-2026-61534 via yayson (>=4.1.0, <=4.2.0)

yayson NPM version =4.1.0, =4.0.0-rc.0, =4.1.4 Source cves: CVE-2026-61534 Source advisory: OSV:GHSA-325J-MG25-8Q58...