fix: upgrade xml2js to patch vuln cwe-1321.

morganney · Apr 13, 2023 · f35244b · f35244b
2 parents c429155 + f915839
commit f35244b
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 19 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,14 +1,14 @@
 {
   "name": "restbus",
   "description": "RESTful JSON API for the NextBus Inc. public XML feed.",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "main": "index",
   "dependencies": {
     "compression": "1.7.4",
     "errorhandler": "1.5.0",
     "express": "4.18.2",
     "morgan": "1.9.1",
-    "xml2js": "0.4.19"
+    "xml2js": "0.5.0"
   },
   "engines": {
     "node": ">= 0.8.0"