# gray-matter (Docusaurus dep) requires js-yaml 3.x which has no patch for this CVE.
# js-yaml 4.2.0 fixes it but breaks gray-matter's API (removed safeLoad).
# Only used to parse trusted markdown front matter from this repo — not exploitable.
# Re-evaluate when Docusaurus updates gray-matter or switches to js-yaml 4.x.
CVE-2026-53550
