From 1d817151898f59e5394fc9d75ffc073f62eecba4 Mon Sep 17 00:00:00 2001 From: Haibo Song Date: Thu, 28 Jul 2016 11:28:09 +0800 Subject: [PATCH] Updated the `request` package to version 2.74.0 to address the security vulnerability - https://nodesecurity.io/advisories/130 --- ChangeLog.md | 1 + package.json | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog.md b/ChangeLog.md index 65d6955..caee276 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -7,6 +7,7 @@ ALL * Fixed the issue that metadata name will be converted to lower-case after retrieving back from the server. **Note** that this fix is only applicable for Node 0.12 or higher version. * Added support for EndpointSuffix for all service constructors. * Updated storage service version to 2015-12-11. Fore more information, please see - https://msdn.microsoft.com/en-us/library/azure/dd894041.aspx +* Updated the `request` package to version 2.74.0 to address the security vulnerability - https://nodesecurity.io/advisories/130 BLOB * Fixed the issue that the service error message will be written to the destination stream if getting error when downloading the blob to a stream/file. diff --git a/package.json b/package.json index 910b377..7947367 100644 --- a/package.json +++ b/package.json @@ -24,7 +24,7 @@ "json-edm-parser": "0.1.2", "node-uuid": "~1.4.0", "readable-stream": "~2.0.0", - "request": "~2.69.0", + "request": "~2.74.0", "underscore": "~1.4.4", "validator": "~3.22.2", "xml2js": "0.2.7",