From 8d55bb04cba98fa708cefa5896564025d06534cb Mon Sep 17 00:00:00 2001
From: OM <44267263+OlivierMartineau@users.noreply.github.com>
Date: Tue, 29 Sep 2026 08:33:21 +0200
Subject: [PATCH] Update package.json

Bump fast-uri dep to ^4.2.1

fast-uri  3.0.0 - 3.1.6 || 4.0.0 - 4.1.3
Severity: high
- fast-uri vulnerable to authority injection via an unvalidated port in serialize - https://github.com/advisories/GHSA-qw65-cvwx-89v3
- fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority - https://github.com/advisories/GHSA-58mr-gqgx-xq4g

Signed-off-by: OM <44267263+OlivierMartineau@users.noreply.github.com>
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 44e16d2..4620916 100644
--- a/package.json
+++ b/package.json
@@ -79,6 +79,6 @@
   "dependencies": {
     "ajv": "^8.12.0",
     "ajv-formats": "^3.0.1",
-    "fast-uri": "^4.0.0"
+    "fast-uri": "^4.2.1"
   }
 }