diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1bb9b17..2f6f417 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,7 +14,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The translation template names the GitHub issue tracker as its bug report address, in place of a WordPress.org support forum the plugin does not have, and its source references were refreshed
 - The code uses PHP 8 forms: short arrays, constructor property promotion, `readonly` classes and properties for the optimization and admin classes, and a null-coalescing assignment. Behavior is unchanged
 - A new Rector job fails when PHP 8.3 or Rector's dead-code, code-quality, type-declaration, or early-return rules would change the code; `rector.php` skips the rules that conflict with WordPress, each with its reason. PHPCS requires the short array syntax
-- ESLint applies modern-JavaScript rules, and ESLint and Stylelint fail on a browser feature that WordPress's supported browsers lack. `package.json` overrides `smol-toml` and `katex` for their advisories; one advisory remains in `braces`, which the Markdown and CSS linters use, until a fixed release exists
+- ESLint applies modern-JavaScript rules, and ESLint and Stylelint fail on a browser feature that WordPress's supported browsers lack. `package.json` overrides `smol-toml`, `katex`, and `re2js` (used by the Markdown linter) for their advisories
 
 ## [1.6.1] - 2026-10-09
 
diff --git a/package-lock.json b/package-lock.json
index 72cfd77..02d4df8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7948,13 +7948,13 @@
       "license": "MIT"
     },
     "node_modules/re2js": {
-      "version": "2.8.6",
-      "resolved": "https://registry.npmjs.org/re2js/-/re2js-2.8.6.tgz",
-      "integrity": "sha512-xLgQil4kIUCrAzVk9fRSkxkFNwmygLFjVxXrLc65aE1F0+Zsb8rxumFBy4XKyvgMCTL6kilDq3EZ0piE2dP/Dg==",
+      "version": "2.8.7",
+      "resolved": "https://registry.npmjs.org/re2js/-/re2js-2.8.7.tgz",
+      "integrity": "sha512-bRSL/vn3KAmlGfGNoVpcsBXLaVvl6AbuvMMWbz0m3vBj60nj+p2/biozfBUOSBP+5XTduF6mr6IO/ZVjmqqkVQ==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=18.0.0"
+        "node": ">=20.0.0"
       }
     },
     "node_modules/react": {
diff --git a/package.json b/package.json
index 308e541..401bf86 100644
--- a/package.json
+++ b/package.json
@@ -31,6 +31,7 @@
   ],
   "overrides": {
     "smol-toml": "1.9.1",
-    "katex": "0.19.0"
+    "katex": "0.19.0",
+    "re2js": "2.8.7"
   }
 }