From 8c22ce096a97c70e4372d824d319e729fdad1d92 Mon Sep 17 00:00:00 2001
From: Mark Jay Nicolas <jay.nicolas@earlyref.com>
Date: Thu, 19 Mar 2026 10:17:08 +0900
Subject: [PATCH] Fix for CVE-2026-26278

---
 packages/core/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/core/package.json b/packages/core/package.json
index 7b6330ac..615e9730 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -47,7 +47,7 @@
     "web-ifc": "0.0.74"
   },
   "dependencies": {
-    "fast-xml-parser": "5.3.7",
+    "fast-xml-parser": "5.5.6",
     "jszip": "3.10.1",
     "three-mesh-bvh": "0.7.0"
   },