diff --git a/package-lock.json b/package-lock.json
index 4c0803a42..0516d5dbe 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
                 "array-equal": "^1.0.0",
                 "aws-sdk": "^2.847.0",
                 "babel-polyfill": "^6.26.0",
-                "bhttp": "^1.2.6",
+                "bhttp": "^1.2.8",
                 "blake2": "^4.0.0",
                 "bluebird": "^3.7.2",
                 "body-parser": "^1.19.0",
@@ -2594,9 +2594,9 @@
             }
         },
         "node_modules/bhttp": {
-            "version": "1.2.6",
-            "resolved": "https://registry.npmjs.org/bhttp/-/bhttp-1.2.6.tgz",
-            "integrity": "sha512-c0ar+LpFYTQMU3VHfdG5+mkslAZ0zHWL8qEzq90Ko/N4e2UQ9Mw55uGbO+TmphkEX6pgyx0mjFVoBv8g8eDS2g==",
+            "version": "1.2.8",
+            "resolved": "https://registry.npmjs.org/bhttp/-/bhttp-1.2.8.tgz",
+            "integrity": "sha512-ZwEA5FKEUhc98EHRX+BkNmUOs48RTnglvfze2+p0HrMPwhQBtVw1aAYyylnCtRl6x6vltCkzGo2+twQ6LVfm6Q==",
             "dependencies": {
                 "bluebird": "^2.8.2",
                 "concat-stream": "^1.4.7",
@@ -17763,9 +17763,9 @@
             }
         },
         "bhttp": {
-            "version": "1.2.6",
-            "resolved": "https://registry.npmjs.org/bhttp/-/bhttp-1.2.6.tgz",
-            "integrity": "sha512-c0ar+LpFYTQMU3VHfdG5+mkslAZ0zHWL8qEzq90Ko/N4e2UQ9Mw55uGbO+TmphkEX6pgyx0mjFVoBv8g8eDS2g==",
+            "version": "1.2.8",
+            "resolved": "https://registry.npmjs.org/bhttp/-/bhttp-1.2.8.tgz",
+            "integrity": "sha512-ZwEA5FKEUhc98EHRX+BkNmUOs48RTnglvfze2+p0HrMPwhQBtVw1aAYyylnCtRl6x6vltCkzGo2+twQ6LVfm6Q==",
             "requires": {
                 "bluebird": "^2.8.2",
                 "concat-stream": "^1.4.7",
diff --git a/package.json b/package.json
index 7a6698c80..a12a195b5 100644
--- a/package.json
+++ b/package.json
@@ -75,7 +75,7 @@
         "array-equal": "^1.0.0",
         "aws-sdk": "^2.847.0",
         "babel-polyfill": "^6.26.0",
-        "bhttp": "^1.2.6",
+        "bhttp": "^1.2.8",
         "blake2": "^4.0.0",
         "bluebird": "^3.7.2",
         "body-parser": "^1.19.0",