CVE-2026-33750 , CVE-2026-27904, CVE-2026-27903, CVE-2026-26996

[jashan05]

Hello Team,

We are getting High CVE's as per below while using the latest version of this package:

CVE	Severity	Direct Dependency	Direct Dependency Version	Affected Component Name	Affected Component Version	Fixed Versions	Type
CVE-2026-33750	High	azure-devops-extension-api	5.274.0	brace-expansion	1.1.11	1.1.13, 2.0.3, 3.0.2, 5.0.5	npm
CVE-2026-27904	High	azure-devops-extension-api	5.274.0	minimatch	3.1.2	10.2.3, 3.1.4, 4.2.5, 5.1.8, 6.2.2, 7.4.8, 8.0.6, 9.0.7	npm
CVE-2026-27903	High	azure-devops-extension-api	5.274.0	minimatch	3.1.2	10.2.3, 3.1.3, 4.2.5, 5.1.8, 6.2.2, 7.4.8, 8.0.6, 9.0.7	npm
CVE-2026-26996	High	azure-devops-extension-api	5.274.0	minimatch	3.1.2	10.2.1, 3.1.3, 4.2.4, 5.1.7, 6.2.1, 7.4.7, 8.0.5, 9.0.6	npm

Could you please help in fixing them.

Best Regards
Jashan Sidhu