From 258af0cf5706ccd38a6c911c81fca64cf063f7ff Mon Sep 17 00:00:00 2001
From: tiennm99 <tiennm99@outlook.com>
Date: Sat, 9 May 2026 12:21:51 +0700
Subject: [PATCH] fix(deps): override fast-uri to >=3.1.2

Resolves dependabot alerts #13 and #14 (GHSA-v39h-62p7-jpjc,
path traversal + host confusion via percent-encoded segments).
fast-uri pulled transitively via vite-plugin-pwa > workbox-build > ajv.
---
 package-lock.json | 4 +++-
 package.json      | 3 ++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 8a4da87..1ca0f41 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3076,7 +3076,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.0",
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
+      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
       "dev": true,
       "funding": [
         {
diff --git a/package.json b/package.json
index 7bdc5ba..ef70811 100644
--- a/package.json
+++ b/package.json
@@ -26,6 +26,7 @@
     "vite-plugin-pwa": "^1.2.0"
   },
   "overrides": {
-    "serialize-javascript": ">=7.0.5"
+    "serialize-javascript": ">=7.0.5",
+    "fast-uri": ">=3.1.2"
   }
 }