fix(security): Address various security vulnerabilities in the release/3.12 branch (#5872)

.circleci/config.yml

@@ -132,8 +132,10 @@ jobs:
 
             # Define ignored vulnerabilities with comments
             IGNORED_VULNS=(
-              "GHSA-3ppc-4f35-3m26"  # CVE-2026-26996 - OHIF's use of minimatch via glob is safe because it does NOT use the CLI
-                                     # CVE-2026-26996 - OHIF's other uses of minimatch are strictly for building and CI/CD purposes
+              "GHSA-3ppc-4f35-3m26"  # CVE-2026-26996 - minimatch via itk-wasm and glob is safe because it does NOT use the CLI
+                                     # CVE-2026-26996 - minimatch via other packages are strictly for building and CI/CD purposes; no user supplied expressions are passed to minimatch
+              "GHSA-7r86-cg39-jmmj"  # CVE-2026-27903 - minimatch same as above
+              "GHSA-23c5-xmqv-rm74"  # CVE-2026-27904 - minimatch same as above
             )
 
             # Build ignore flags