Weekly security drift — high/critical vulns detected

[github-actions]

Weekly dependency drift

npm audit --audit-level=high (full dependency tree, including devDeps)
detected at least one high or critical vulnerability since
the last clean run.

• Workflow run: https://github.com/StellarTips/StellarTip-Backend/actions/runs/32682776708
• Triggered: schedule

Triage

1. Open the drift audit artifacts from the workflow run.
2. Bump the affected package(s) or add an explicit, time-bounded
   .snyk suppression per docs/SECURITY.md (reason + expires).
3. Close this issue when the next weekly run passes.

[github-actions]

Still drifting as of run 33364995414 — see workflow run. Please prioritize triage.