From 49b8630f2bf8ff21e22f5dc38162e48a31d11c61 Mon Sep 17 00:00:00 2001 From: Valera V Harseko Date: Thu, 3 Sep 2026 10:50:13 +0300 Subject: [PATCH] CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172 GHSA-qw65-cvwx-89v3 GHSA-58mr-gqgx-xq4g fast-uri: SSRF and host confusion (3.1.5 -> 3.1.7) Combines dependabot PRs #1116 (openam-ui-js-sdk) and #1117 (openam-ui-ria) into a single change. --- openam-ui/openam-ui-js-sdk/package-lock.json | 6 +++--- openam-ui/openam-ui-ria/package-lock.json | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/openam-ui/openam-ui-js-sdk/package-lock.json b/openam-ui/openam-ui-js-sdk/package-lock.json index c52e65a3e4..3015c97513 100644 --- a/openam-ui/openam-ui-js-sdk/package-lock.json +++ b/openam-ui/openam-ui-js-sdk/package-lock.json @@ -3109,9 +3109,9 @@ "license": "MIT" }, "node_modules/fast-uri": { - "version": "3.1.5", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz", - "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==", + "version": "3.1.7", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz", + "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==", "dev": true, "funding": [ { diff --git a/openam-ui/openam-ui-ria/package-lock.json b/openam-ui/openam-ui-ria/package-lock.json index 8577380f7f..4732eb0ab7 100644 --- a/openam-ui/openam-ui-ria/package-lock.json +++ b/openam-ui/openam-ui-ria/package-lock.json @@ -3587,9 +3587,9 @@ "dev": true }, "node_modules/fast-uri": { - "version": "3.1.5", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz", - "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==", + "version": "3.1.7", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz", + "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==", "dev": true, "funding": [ {