fix(deps): override fast-uri to >=3.1.2

Resolves dependabot alerts #13 and #14 (GHSA-v39h-62p7-jpjc,
path traversal + host confusion via percent-encoded segments).
fast-uri pulled transitively via vite-plugin-pwa > workbox-build > ajv.
This commit is contained in:
tiennm99 committed 2026-05-09 12:21:51 +07:00
1 parent a8f75e78c7
commit 258af0cf57
2 files changed
+5 -2

No files matched your search

+3 -1
View File
@@ -3076,7 +3076,9 @@
"license": "MIT" "license": "MIT"
}, },
"node_modules/fast-uri": { "node_modules/fast-uri": {
"version": "3.1.0", "version": "3.1.2",
"resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
"integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
"dev": true, "dev": true,
"funding": [ "funding": [
{ {
+2 -1
View File
@@ -26,6 +26,7 @@
"vite-plugin-pwa": "^1.2.0" "vite-plugin-pwa": "^1.2.0"
}, },
"overrides": { "overrides": {
"serialize-javascript": ">=7.0.5" "serialize-javascript": ">=7.0.5",
"fast-uri": ">=3.1.2"
} }
} }