From 2bf998bfd1504f8bcd669cba3fb12f50b3d9fef8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 4 Nov 2024 05:27:51 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 78202d1..3201d6d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,7 +18,7 @@ "csurf": "^1.11.0", "debug": "~4.3.4", "dotenv": "^16.0.3", - "elliptic": "^6.5.4", + "elliptic": "^6.6.0", "errorhandler": "^1.5.1", "express": "~4.19.2", "helmet": "^6.0.1", @@ -4400,9 +4400,9 @@ "license": "ISC" }, "node_modules/elliptic": { - "version": "6.5.5", - "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.5.tgz", - "integrity": "sha512-7EjbcmUm17NQFu4Pmgmq2olYMj8nwMnpcddByChSUjArp8F5DQWcIcpriwO4ZToLNAJig0yiyjswfyGNje/ixw==", + "version": "6.6.0", + "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.6.0.tgz", + "integrity": "sha512-dpwoQcLc/2WLQvJvLRHKZ+f9FgOdjnq11rurqwekGQygGPsYSK29OMMD2WalatiqQ+XGFDglTNixpPfI+lpaAA==", "license": "MIT", "dependencies": { "bn.js": "^4.11.9", diff --git a/package.json b/package.json index 108b101..e4b17fb 100644 --- a/package.json +++ b/package.json @@ -35,7 +35,7 @@ "csurf": "^1.11.0", "debug": "~4.3.4", "dotenv": "^16.0.3", - "elliptic": "^6.5.4", + "elliptic": "^6.6.0", "errorhandler": "^1.5.1", "express": "~4.19.2", "helmet": "^6.0.1",