SubMiner/changes/security-audit-high-advisories.md

type: internal area: dependencies

• Patched three high-severity dependency advisories flagged by bun audit: undici (cross-user information disclosure via degenerate private cache directives), brace-expansion (denial of service via unbounded intermediate arrays), and fast-uri (host confusion via backslash authority introducer).