nstarter-http-request 0.1.3 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +5 -1
- package/package.json +3 -3
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,10 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
* 0.1.4
|
|
4
|
+
* 升级 `axios` 至 `^1.15.0`，修复 `CVE-2026-40175` header injection gadget chain 风险.
|
|
5
|
+
* 同步修复 `axios` 旧版本的 `NO_PROXY` 主机名规范化绕过导致的 SSRF 风险.
|
|
6
|
+
* 升级 `undici` 至 `^6.25.0`，修复 v6 线 HTTP 与 WebSocket 相关安全风险.
|
|
7
|
+
|
|
3
8
|
* 0.1.3
|
|
4
9
|
* 修复 `dns` 解析在 `ACK` 等带集群后缀的环境会 `ENOTFOUND`.
|
|
5
10
|
* 默认配置关闭 `ip` 与 `dns` 校验.
|
|
@@ -12,4 +17,3 @@
|
|
|
12
17
|
|
|
13
18
|
* 0.1.0
|
|
14
19
|
* Initial release.
|
|
15
|
-
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "nstarter-http-request",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.4",
|
|
4
4
|
"description": "nstarter HTTP 请求客户端插件",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -34,10 +34,10 @@
|
|
|
34
34
|
}
|
|
35
35
|
},
|
|
36
36
|
"dependencies": {
|
|
37
|
-
"axios": "^1.
|
|
37
|
+
"axios": "^1.15.0",
|
|
38
38
|
"https-proxy-agent": "^7.0.6",
|
|
39
39
|
"lru-cache": "^11.2.4",
|
|
40
|
-
"undici": "^6.
|
|
40
|
+
"undici": "^6.25.0"
|
|
41
41
|
},
|
|
42
42
|
"peerDependencies": {
|
|
43
43
|
"nstarter-core": ">=1.2.0 <2.0.0"
|