trivet (>=2.1.0, <=2.1.1) potentially affected by CVE-2025-57520 via decap-cms (3.0.12)

decap-cms NPM version 3.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on decap-cms and may be impacted: - trivet =2.1.0, =2.1.1 Source cves: CVE-2025-57520 Source advisory: OSV:GHSA-XP8G-32QH-MV28...

@lightnet/decap-admin (>=2.0.9, <=2.4.1), trivet (>=2.1.0, <=2.1.1) potentially affected by CVE-2025-57520 via decap-cms (>=3.0.12, <=3.15.1)

decap-cms NPM version =3.0.12, =2.0.9, =2.1.0, =2.1.1 Source cves: CVE-2025-57520 Source advisory: SNYK:JS-DECAPCMS-12997397...