diff --git a/package-lock.json b/package-lock.json
index b23a319..b2012e8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -729,15 +729,15 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/buffer": {
diff --git a/package.json b/package.json
index 619e632..1fa4012 100644
--- a/package.json
+++ b/package.json
@@ -249,5 +249,8 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "style-dictionary": "5.5.0",
     "zod": "4.4.3"
+  },
+  "overrides": {
+    "brace-expansion": "5.0.9"
   }
 }