From 746759cc4def477a8594c49ef299a15aa2ed1746 Mon Sep 17 00:00:00 2001 From: Yoann Colin Date: Mon, 17 Sep 2018 09:59:35 +0200 Subject: [PATCH] Upgrade request package to v.2.88 The package `extend 3.0.1`, which is a dependency of `request 2.87` has a vulnerability : https://hackerone.com/reports/381185 Upgrade `request` to v.2.88 will install `extend` v.3.0.2, the fixed version. Fix #2496 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 7b8b293ce..796775d3c 100644 --- a/package.json +++ b/package.json @@ -68,7 +68,7 @@ "nan": "^2.10.0", "node-gyp": "^3.8.0", "npmlog": "^4.0.0", - "request": "2.87.0", + "request": "^2.88.0", "sass-graph": "^2.2.4", "stdout-stream": "^1.4.0", "true-case-path": "^1.0.2"