fast-uri vulnerable to path traversal via percent-encoded dot segments and host confusion via percent-encoded authority delimiters

[g1rly-c0d3r]

webpack pulls in fast-uri as a transitive dependency. fast-uri decodes percent-encoded path separators, dot segments, and authority delimiters before sanitation, which can lead to both path traversal on servers or navigation to untrusted, possibly malicious, URLs.

https://github.com/specify/specify7/security/dependabot/229

https://github.com/specify/specify7/security/dependabot/230