Update amqplib package that update its url-parse dependency to a vers…

…ion that is no longer vulnerable to Authorization Bypass Through User-Controlled Key. (#11557)
microsoft · Aug 16, 2022 · 71a63e3 · 71a63e3
1 parent a972870
commit 71a63e3
Show file tree

Hide file tree

Showing 3 changed files with 43 additions and 119 deletions.
diff --git a/server/historian/lerna-package-lock.json b/server/historian/lerna-package-lock.json
diff --git a/server/routerlicious/lerna-package-lock.json b/server/routerlicious/lerna-package-lock.json
diff --git a/server/routerlicious/packages/services/package.json b/server/routerlicious/packages/services/package.json
@@ -60,7 +60,7 @@
     "@fluidframework/server-services-telemetry": "^0.1037.2000",
     "@fluidframework/server-services-utils": "^0.1037.2000",
     "@socket.io/redis-emitter": "^4.1.0",
-    "amqplib": "^0.8.0",
+    "amqplib": "^0.10.2",
     "axios": "^0.26.0",
     "debug": "^4.1.1",
     "ioredis": "^4.24.2",