fix(deps): override fast-uri to >=3.1.2

Resolves dependabot alerts #13 and #14 (GHSA-v39h-62p7-jpjc,
path traversal + host confusion via percent-encoded segments).
fast-uri pulled transitively via vite-plugin-pwa > workbox-build > ajv.
This commit is contained in:
tiennm99 committed 2026-05-09 12:21:51 +07:00
1 parent a8f75e78c7
commit 258af0cf57
2 files changed
+5 -2

No files matched your search

+3 -1
View File
@@ -3076,7 +3076,9 @@
"license": "MIT"
},
"node_modules/fast-uri": {
"version": "3.1.0",
"version": "3.1.2",
"resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
"integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
"dev": true,
"funding": [
{
+2 -1
View File
@@ -26,6 +26,7 @@
"vite-plugin-pwa": "^1.2.0"
},
"overrides": {
"serialize-javascript": ">=7.0.5"
"serialize-javascript": ">=7.0.5",
"fast-uri": ">=3.1.2"
}
}