From f2053ccb4929cb3069cf08e3fce7adab49dd8488 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Fri, 21 Aug 2026 00:21:29 +0000
Subject: [PATCH] fix: CVE-2026-13676 security vulnerability

Automated dependency upgrade by OrbisAI Security
---
 package-lock.json | 10 +++++-----
 package.json      |  3 ++-
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index eba9e3b..1693477 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@gravitykit/block-mcp",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@gravitykit/block-mcp",
-      "version": "2.2.0",
+      "version": "2.2.1",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.0.0",
@@ -2297,9 +2297,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
-      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-4.1.2.tgz",
+      "integrity": "sha512-TyGmBcbDTZXcb2cj5MV89DrF42DKvb3y5DDUNh95iO+IMeAzMkVSxK1PZRrRIpc9yg8U2GhGdbofNa0LS/a4Bw==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index 716d2a0..02dcdb5 100644
--- a/package.json
+++ b/package.json
@@ -73,6 +73,7 @@
     "access": "public"
   },
   "overrides": {
-    "esbuild": "$esbuild"
+    "esbuild": "$esbuild",
+    "fast-uri": "4.1.2"
   }
 }