From c601b3e9066919d97d728dcf6fc3092c14b93250 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 9 Sep 2026 16:15:32 +0000
Subject: [PATCH] fix: CVE-2026-69192 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 .../trtc-eval/scripts/package-lock.json       |  6 ++---
 .claude/skills/trtc-eval/scripts/package.json | 26 +++++++++++++++++++
 2 files changed, 29 insertions(+), 3 deletions(-)

diff --git a/.claude/skills/trtc-eval/scripts/package-lock.json b/.claude/skills/trtc-eval/scripts/package-lock.json
index 9de2101..2495bd2 100644
--- a/.claude/skills/trtc-eval/scripts/package-lock.json
+++ b/.claude/skills/trtc-eval/scripts/package-lock.json
@@ -663,9 +663,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.2.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
-      "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
+      "version": "10.3.1",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.3.1.tgz",
+      "integrity": "sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
diff --git a/.claude/skills/trtc-eval/scripts/package.json b/.claude/skills/trtc-eval/scripts/package.json
index 323d94e..b96d703 100644
--- a/.claude/skills/trtc-eval/scripts/package.json
+++ b/.claude/skills/trtc-eval/scripts/package.json
@@ -5,5 +5,31 @@
   "description": "Eval-only Node dependencies (puppeteer) for scripts/log-bridge.mjs. Kept separate from templates/web-demo to avoid polluting demo deps.",
   "dependencies": {
     "puppeteer": "^23.0.0"
+  },
+  "overrides": {
+    "@puppeteer/browsers": {
+      "ip-address": "10.3.1"
+    },
+    "ip-address": {
+      "ip-address": "10.3.1"
+    },
+    "pac-proxy-agent": {
+      "ip-address": "10.3.1"
+    },
+    "proxy-agent": {
+      "ip-address": "10.3.1"
+    },
+    "puppeteer": {
+      "ip-address": "10.3.1"
+    },
+    "puppeteer-core": {
+      "ip-address": "10.3.1"
+    },
+    "socks": {
+      "ip-address": "10.3.1"
+    },
+    "socks-proxy-agent": {
+      "ip-address": "10.3.1"
+    }
   }
 }