[Snyk] Security upgrade @ethereumjs/tx from 4.1.1 to 4.1.2

[CASABECI]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/ethereum/transaction/package.json
  • packages/ethereum/transaction/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	170/1000 Why? Confidentiality impact: None, Integrity impact: High, Availability impact: None, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 2, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.83, Score Version: V5	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8187303	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @ethereumjs/tx

The new version differs by 38 commits.

• 49c2d93 New Maintenance Release Round (#2648)
• ca32296 Bump chainsafe/ssz to 0.11.1 (#2656)
• 1726a86 Fix karma dependency resolution in `vm` (#2645)
• e84fe7d Monorepo: remove Node 14 from Node version GitHub actions nightly run, remove npm v7 check (#2644)
• b4b1f82 Update ethereum-cryptography from 1.2 to 2.0 (#2641)
• efc4487 Kick `ethers` off the `block` (Include Truffle Dashboard in ganache trufflesuite/ganache#2633)
• 205dc35 client: Fix breaking tests because of scheduled mainnet shanghai hf (#2635)
• da187d4 client: Add snap bytecode fetcher (fix: ensure impersonated "large" accounts use compliant (fake) private keys trufflesuite/ganache#2602)
• e8cf85b Bump `@ chainsafe/ssz` to `0.11.0` (#2622)
• c83f11b Add London+ hardfork support for Retesteth, fix EIP150 tests (#2619)
• 60995fb Tx: correctly decode rpc txs (#2613)
• abe741e client: tests for getTrieNodes and trieNodes SNAP messages (#2282)
• 8910fe2 Remove and replace some EF bootnodes (Feature request: Use a config file to start Ganache with parameters trufflesuite/ganache#2576)
• ecb62e5 Update ethereum/tests to v12 (#2601)
• e2ec03c client: Add support for storage and bytecode fetching (Add polyfill for http and https trufflesuite/ganache#2345)
• f0166f5 Fix Block Hash Calculation When Creating a New Block Object From JSON RPC (Shanghai) (All transaction signatures whose s-value is greater than secp256k1n/2 are now considered invalid, but ganache accepts them trufflesuite/ganache#2600)
• 8f989b4 evm: clamp step event memory to actual size (#2598)
• edacccb evm/tx: update allowUnlimitedInitCodeSize casing (#2597)
• 7e6daf2 evm+tx: add allowUnlimitedInitcodeSize (ganache: command not found trufflesuite/ganache#2594)
• f5ab7fc VM: Diff-based Touched Accounts Checkpointing (#2581)
• cbf9a04 common: Schedule Shanghai on mainnet! (#2591)
• 178d07e Client: Small Debug Helpers and CLI Improvements (Transaction from unlocked account fails with error: "The nonce generation function failed, or the private key was invalid": trufflesuite/ganache#2586)
• 0fbfe07 client: Add safe and finalized blockoptions to the chain (#2585)
• b6bb0a2 Setup to dev/test snapsync with sim architecture (#2574)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.