From 9b87a889768f62b916a2f7a7ed0b2cf4a06e25a0 Mon Sep 17 00:00:00 2001 From: PratikKataria-plivo <118793471+PratikKataria-plivo@users.noreply.github.com> Date: Mon, 8 May 2023 10:14:08 +0530 Subject: [PATCH] Updating xml2js (#302) * Updated xml2js * Update changelog --- .gitignore | 18 ++++++++++++++++++ CHANGELOG.md | 4 ++++ package.json | 4 ++-- 3 files changed, 24 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index d5b974df..d3b238f7 100644 --- a/.gitignore +++ b/.gitignore @@ -5,3 +5,21 @@ node_modules coverage dist node-sdk-test/ + +# Logs +logs +*.log +npm-debug.log* + +# Diagnostic reports (https://nodejs.org/api/report.html) +report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json + +# Coverage directory used by tools like istanbul +*.lcov + +# dotenv environment variable files +.env +.env.development.local +.env.test.local +.env.production.local +.env.local \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 6a21cdfc..0e8a5b9b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Change Log +## [v4.46.1](https://github.com/plivo/plivo-node/tree/v4.46.1) (2023-05-08) +**Chore - Bump xml2js from 0.4.19 to 0.5.0** +- Resolves [xml2js is vulnerable to prototype pollution](https://github.com/advisories/GHSA-776f-qx25-q3cc) + ## [4.46.0](https://github.com/plivo/plivo-node/tree/v4.46.0) (2023-05-04) **Adding new attribute - 'renewalDate' in Get Number and List Numbers APIs** - Add New Param `renewalDate` to the response of the [list all numbers API], [list single number API] diff --git a/package.json b/package.json index fd21150f..f86ad8c3 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "plivo", - "version": "4.46.0", + "version": "4.46.1", "description": "A Node.js SDK to make voice calls and send SMS using Plivo and to generate Plivo XML", "homepage": "https://github.com/plivo/plivo-node", "files": [ @@ -68,7 +68,7 @@ "querystring": "^0.2.0", "uri-parser": "^1.0.0", "utf8": "^2.1.2", - "xml2js": "^0.4.19", + "xml2js": "^0.5.0", "xmlbuilder": "^9.0.1" } }