fix(security): vulnerabilities found in cactus-connector-besu

Fixes hyperledger-cacti#2040 Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
aldousalvarez · Jan 4, 2023 · 74ce012 · 74ce012
1 parent 25f2f54
commit 74ce012
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 6 deletions.
diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
@@ -1,6 +1,7 @@
 general:
  vulnerabilities:
  #besu-all-in-one
+
+ - CVE-2022-37734
+ - CVE-2022-25857
 
- -CVE-2022-37734
- -CVE-2022-25857
diff --git a/packages/cactus-core/package.json b/packages/cactus-core/package.json
@@ -52,9 +52,9 @@
  "dependencies": {
  "@hyperledger/cactus-common": "1.1.3",
  "@hyperledger/cactus-core-api": "1.1.3",
- "express": "4.17.1",
+ "express": "4.17.3",
  "express-jwt-authz": "2.4.1",
- "express-openapi-validator": "4.12.12",
+ "express-openapi-validator": "5.0.0",
  "typescript-optional": "2.0.1"
  },
  "devDependencies": {

diff --git a/packages/cactus-plugin-keychain-memory/package.json b/packages/cactus-plugin-keychain-memory/package.json
@@ -57,7 +57,7 @@
  "@hyperledger/cactus-core": "1.1.3",
  "@hyperledger/cactus-core-api": "1.1.3",
  "axios": "0.21.4",
- "express": "4.17.1",
+ "express": "4.17.3",
  "prom-client": "13.2.0",
  "uuid": "8.3.2"
  },

diff --git a/packages/cactus-plugin-ledger-connector-besu/package.json b/packages/cactus-plugin-ledger-connector-besu/package.json
@@ -57,7 +57,7 @@
  "@hyperledger/cactus-core": "1.1.3",
  "@hyperledger/cactus-core-api": "1.1.3",
  "axios": "0.21.4",
- "express": "4.17.1",
+ "express": "4.17.3",
  "joi": "17.4.2",
  "openapi-types": "9.1.0",
  "prom-client": "13.2.0",