Commit ae44ae4
committed
chore(deps): add fast-uri ^3.1.2 override to fix 2 high-severity CVEs
Closes Dependabot alerts:
- #128 fast-uri path traversal via percent-encoded dot segments (HIGH)
- #129 fast-uri host confusion via percent-encoded authority delimiters (HIGH)
fast-uri is a transitive dep pulled in by the ajv → fastify-style
chain. The 3.1.2 release normalises percent-encoded sequences before
authority/path parsing, closing both classes of confusion.1 parent 4f9dcbc commit ae44ae4
1 file changed
Lines changed: 2 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
83 | 83 | | |
84 | 84 | | |
85 | 85 | | |
86 | | - | |
| 86 | + | |
| 87 | + | |
87 | 88 | | |
88 | 89 | | |
89 | 90 | | |
| |||
0 commit comments