From 1ac10ed725f476cbe882cca35270df4c48403fa4 Mon Sep 17 00:00:00 2001 From: g1rly-c0d3r Date: Tue, 21 Jul 2026 12:06:19 -0500 Subject: [PATCH] fix: explicitly add `fast-uri` to address security issues 229 & 230 --- specifyweb/frontend/js_src/package-lock.json | 7 ++++--- specifyweb/frontend/js_src/package.json | 1 + 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/specifyweb/frontend/js_src/package-lock.json b/specifyweb/frontend/js_src/package-lock.json index 5b5344e36f4..9abd66a3a91 100644 --- a/specifyweb/frontend/js_src/package-lock.json +++ b/specifyweb/frontend/js_src/package-lock.json @@ -83,6 +83,7 @@ "core-js": "^3.23.4", "css-loader": "^6.10.0", "eslint": "^8.31.0", + "fast-uri": "^3.1.4", "fast-xml-parser": "^5.5.7", "gettext-parser": "^6.0.0", "jest": "^30.3.0", @@ -10282,9 +10283,9 @@ "license": "MIT" }, "node_modules/fast-uri": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz", - "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==", + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz", + "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==", "dev": true, "funding": [ { diff --git a/specifyweb/frontend/js_src/package.json b/specifyweb/frontend/js_src/package.json index 58c868bb9f3..6ca42301d77 100644 --- a/specifyweb/frontend/js_src/package.json +++ b/specifyweb/frontend/js_src/package.json @@ -103,6 +103,7 @@ "core-js": "^3.23.4", "css-loader": "^6.10.0", "eslint": "^8.31.0", + "fast-uri": "^3.1.4", "fast-xml-parser": "^5.5.7", "gettext-parser": "^6.0.0", "jest": "^30.3.0",