From deae7a265374766386a33b2c011768bbe7062991 Mon Sep 17 00:00:00 2001 From: Marek Ciupak <6394528+marekciupak@users.noreply.github.com> Date: Thu, 8 Oct 2020 00:16:37 +0200 Subject: [PATCH] Upgrade bl: 2.2.0 -> 2.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit To get rid of the following vulnerability: ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ High │ Remote Memory Exposure │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ bl │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ @microsoft/signalr-protocol-msgpack │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ @microsoft/signalr-protocol-msgpack > msgpack5 > bl │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://npmjs.com/advisories/1555 │ └───────────────┴──────────────────────────────────────────────────────────────┘ --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6a8db88c15..b223a806d0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1778,9 +1778,9 @@ "dev": true }, "bl": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/bl/-/bl-2.2.0.tgz", - "integrity": "sha512-wbgvOpqopSr7uq6fJrLH8EsvYMJf9gzfo2jCsL2eTy75qXPukA4pCgHamOQkZtY5vmfVtjB+P3LNlMHW5CEZXA==", + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/bl/-/bl-2.2.1.tgz", + "integrity": "sha512-6Pesp1w0DEX1N550i/uGV/TqucVL4AM/pgThFSN/Qq9si1/DF9aIHs1BxD8V/QU0HoeHO6cQRTAuYnLPKq1e4g==", "requires": { "readable-stream": "^2.3.5", "safe-buffer": "^5.1.1"