From b410c39133a117a05745a2eb2ba5fecd5f598c69 Mon Sep 17 00:00:00 2001
From: wucm667 <stevenwucongmin@gmail.com>
Date: Wed, 19 Aug 2026 10:17:52 +0800
Subject: [PATCH] fix(security): add nanoid audit exception for
 GHSA-2v37-7h3g-55p8

---
 .github/audit-exceptions.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/audit-exceptions.yml b/.github/audit-exceptions.yml
index 2a89dd0761..6243f0fa7f 100644
--- a/.github/audit-exceptions.yml
+++ b/.github/audit-exceptions.yml
@@ -35,3 +35,10 @@ exceptions:
     mitigation: "Proxy configuration not user-controlled; upgrade when axios releases fix"
     expires_on: "2026-07-10"
     owner: "security@your-domain"
+  - package: nanoid
+    advisory: "GHSA-2v37-7h3g-55p8"
+    severity: high
+    reason: "Custom generator with size=0 not used; all nanoid calls use default size or positive values"
+    mitigation: "No zero-size custom generators in codebase; upgrade when nanoid releases fix"
+    expires_on: "2026-10-13"
+    owner: "security@your-domain"