From 845874b75d1572312ad4a27b7b064b82f09a7dbb Mon Sep 17 00:00:00 2001 From: Snyk Community Date: Tue, 18 Oct 2016 13:22:15 +0300 Subject: [PATCH] Fix for 2 vulnerable dependency paths node-flowdock currently has a 2 vulnerable dependency paths, introducing 2 different types of known vulnerabilities. This PR fixes vulnerable dependencies. * [ReDOS vulnerability](https://snyk.io/vuln/npm:hawk:20160119) in the `hawk` dependency. * [remote memory exposure ](https://snyk.io/vuln/npm:request:20160119) vulnerability in the `request` dependency. You can see [Snyk test report](https://snyk.io/test/github/flowdock/node-flowdock) of this project for details. This PR changes `Package.json` to upgrade `request` to the newer 2.74.0 version, and will fix all the vulnerabilities. You can get alerts and fix PRs for future vulnerabilities for free by [watching this repo with Snyk](https://snyk.io/add). Stay Secure, The Snyk Team --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 9e925ab..9b9dfa7 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,7 @@ }, "dependencies": { "buffertools": "~2.1.3", - "request": "~2.58.0" + "request": "~2.74.0" }, "devDependencies": { "coffee-script": "~1.9.3",