deps: on-headers@1.1.0 (#49)

UlisesGascon · web-flow · commit c9c8566dd0e4 · 2025-07-17T19:25:11.000+02:00
diff --git a/HISTORY.md b/HISTORY.md
@@ -1,3 +1,9 @@
+unreleased
+==========
+
+  * deps: on-headers@~1.1.0
+    - Fix [CVE-2025-7339](https://www.cve.org/CVERecord?id=CVE-2025-7339) ([GHSA-76c9-3jph-rj3q](https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q))
+
 2.3.3 / 2024-10-07
 ==========
 
diff --git a/package.json b/package.json
@@ -16,7 +16,7 @@
   "repository": "expressjs/response-time",
   "dependencies": {
     "depd": "~2.0.0",
-    "on-headers": "~1.0.1"
+    "on-headers": "~1.1.0"
   },
   "devDependencies": {
     "after": "0.8.2",
