Skip to content

Security patches #61

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Mar 18, 2022
Merged

Security patches #61

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
858456a
fix(CVE-2021-23358): upgraded underscore
jaybuidl Mar 18, 2022
0f9dbd4
fix(CVE-2021-23337, CVE-2020-28500): upgraded lodash
jaybuidl Mar 18, 2022
5e0f3ca
fix(CVE-2022-0235): upgraded node-fetch
jaybuidl Mar 18, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,11 @@
"solhint": "^3.3.6",
"solhint-plugin-prettier": "^0.0.5"
},
"resolutions": {
"underscore@npm": "^1.13.2",
"lodash@npm": "^4.17.21",
"node-fetch": "^2.6.7"
},
"commitlint": {
"extends": [
"@commitlint/config-conventional"
Expand Down
111 changes: 53 additions & 58 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,16 +40,16 @@ __metadata:
linkType: hard

"@babel/core@npm:^7.15.5":
version: 7.17.7
resolution: "@babel/core@npm:7.17.7"
version: 7.17.8
resolution: "@babel/core@npm:7.17.8"
dependencies:
"@ampproject/remapping": ^2.1.0
"@babel/code-frame": ^7.16.7
"@babel/generator": ^7.17.7
"@babel/helper-compilation-targets": ^7.17.7
"@babel/helper-module-transforms": ^7.17.7
"@babel/helpers": ^7.17.7
"@babel/parser": ^7.17.7
"@babel/helpers": ^7.17.8
"@babel/parser": ^7.17.8
"@babel/template": ^7.16.7
"@babel/traverse": ^7.17.3
"@babel/types": ^7.17.0
Expand All @@ -58,7 +58,7 @@ __metadata:
gensync: ^1.0.0-beta.2
json5: ^2.1.2
semver: ^6.3.0
checksum: 467838313f8c84037d08d051238005c48f6b3da6fbaed38cd2dac5fcbe3706df2857365b8a9291402b3b888c24edb9707dc6c93f0127fecc7fe49b700c35c057
checksum: 0e686b1be444d25494424065238931f2b3df908bf072b72bab973acfd6d27a481fc280c9cd8a3c6fe2c46beee50e0d2307468d8b15b64dc4036f025e75f6609d
languageName: node
linkType: hard

Expand Down Expand Up @@ -191,14 +191,14 @@ __metadata:
languageName: node
linkType: hard

"@babel/helpers@npm:^7.17.7":
version: 7.17.7
resolution: "@babel/helpers@npm:7.17.7"
"@babel/helpers@npm:^7.17.8":
version: 7.17.8
resolution: "@babel/helpers@npm:7.17.8"
dependencies:
"@babel/template": ^7.16.7
"@babel/traverse": ^7.17.3
"@babel/types": ^7.17.0
checksum: fdc93714b3eb3b7a179a5133c3d7008f36785af469bb091a2f056f1a893aeedc8654e87c5e04a5cdecb6587e6177839a4b887b832be289689ffe277d08dfd4a7
checksum: 463dad58119fefebf2d0201bfa53ec9607aa00356908895640fc07589747fb3c2e0dfee4019f3e8c9781e57c9aa5dff4c72ec8d1b031c4ed8349f90b6aefe99d
languageName: node
linkType: hard

Expand All @@ -222,21 +222,21 @@ __metadata:
languageName: node
linkType: hard

"@babel/parser@npm:^7.16.4, @babel/parser@npm:^7.16.7, @babel/parser@npm:^7.17.3, @babel/parser@npm:^7.17.7":
version: 7.17.7
resolution: "@babel/parser@npm:7.17.7"
"@babel/parser@npm:^7.16.4, @babel/parser@npm:^7.16.7, @babel/parser@npm:^7.17.3, @babel/parser@npm:^7.17.8":
version: 7.17.8
resolution: "@babel/parser@npm:7.17.8"
bin:
parser: ./bin/babel-parser.js
checksum: d2612c2597838a605bcbe921fd2c7381b3ab75603c7907020df037c22a3d27f0507285da74553cd75f403300ca76642323ca2e72ba55cc4222d4a20b87505b0c
checksum: 1771808491982cc47baa888a997aef6b58308e3844c8c00f730f8fd97defe57d32cdbf46075cd49aaee310fa31f3d2c80a0d41b41a4ee0ff336ee09e2ff6c222
languageName: node
linkType: hard

"@babel/runtime@npm:^7.10.1, @babel/runtime@npm:^7.11.1, @babel/runtime@npm:^7.11.2, @babel/runtime@npm:^7.12.5, @babel/runtime@npm:^7.5.5, @babel/runtime@npm:^7.6.2, @babel/runtime@npm:^7.7.2":
version: 7.17.7
resolution: "@babel/runtime@npm:7.17.7"
version: 7.17.8
resolution: "@babel/runtime@npm:7.17.8"
dependencies:
regenerator-runtime: ^0.13.4
checksum: d9ec9e2c5ebbf503ac865ebd70d0216443d0fa8380bab572aa44ccf8fafde8b8b9846badfdbba3572f79075c9a196845aa3f42a435fd34ec832acd2bc1467d37
checksum: 68d195c1630bb91ac20e86635d292a17ebab7f361cfe79406b3f5a6cc2e59fa283ae5006568899abf869312c2b35b744bd407aea8ffdb650f1a68d07785d47e9
languageName: node
linkType: hard

Expand Down Expand Up @@ -3013,11 +3013,11 @@ __metadata:
linkType: hard

"@types/keyv@npm:^3.1.1":
version: 3.1.3
resolution: "@types/keyv@npm:3.1.3"
version: 3.1.4
resolution: "@types/keyv@npm:3.1.4"
dependencies:
"@types/node": "*"
checksum: b5f8aa592cc21c16d99e69aec0976f12b893b055e4456d90148a610a6b6088e297b2ba5f38f8c8280cef006cfd8f9ec99e069905020882619dc5fc8aa46f5f27
checksum: e009a2bfb50e90ca9b7c6e8f648f8464067271fd99116f881073fa6fa76dc8d0133181dd65e6614d5fb1220d671d67b0124aef7d97dc02d7e342ab143a47779d
languageName: node
linkType: hard

Expand Down Expand Up @@ -5497,8 +5497,8 @@ __metadata:
linkType: hard

"cacache@npm:^16.0.0":
version: 16.0.1
resolution: "cacache@npm:16.0.1"
version: 16.0.2
resolution: "cacache@npm:16.0.2"
dependencies:
"@npmcli/fs": ^1.0.0
"@npmcli/move-file": ^1.1.2
Expand All @@ -5518,7 +5518,7 @@ __metadata:
ssri: ^8.0.1
tar: ^6.1.11
unique-filename: ^1.1.1
checksum: 7f461244a6ed30b8e34a1c8d598712035135b5489152cc6458642858ebd8075f39bf0998b768cc29e41263524632af93b41987f8debb703d9a2f29f37cc0552b
checksum: dced60dc532ed6a6da3feeb7736c5cb38bbbc900e273a04e68e510cc9bd1acab8e61ee86df7b4fe959ef35e39fd74abb4cb4834d221a9a59afa8029f3773eab3
languageName: node
linkType: hard

Expand Down Expand Up @@ -6929,7 +6929,19 @@ __metadata:
languageName: node
linkType: hard

"debug@npm:4, debug@npm:4.3.3, debug@npm:^4.0.1, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.2.0, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.3":
"debug@npm:4, debug@npm:^4.0.1, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.2.0, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.3":
version: 4.3.4
resolution: "debug@npm:4.3.4"
dependencies:
ms: 2.1.2
peerDependenciesMeta:
supports-color:
optional: true
checksum: 3dbad3f94ea64f34431a9cbf0bafb61853eda57bff2880036153438f50fb5a84f27683ba0d8e5426bf41a8c6ff03879488120cf5b3a761e77953169c0600a708
languageName: node
linkType: hard

"debug@npm:4.3.3":
version: 4.3.3
resolution: "debug@npm:4.3.3"
dependencies:
Expand Down Expand Up @@ -7444,9 +7456,9 @@ __metadata:
linkType: hard

"electron-to-chromium@npm:^1.3.47, electron-to-chromium@npm:^1.4.84":
version: 1.4.86
resolution: "electron-to-chromium@npm:1.4.86"
checksum: 41d9f8ef28bba0cbc79a7662fb067dc47f418ca6a7a0df5f251a231e05cc2c7dfe40b6328e3da68661218ca1e682476caf8147b4fe35508b96d2e264a14a1992
version: 1.4.88
resolution: "electron-to-chromium@npm:1.4.88"
checksum: a93d364efae8e6f718f1aae0f47914028178ed0b643cc583344127dc547bf1f7fc8df066834233e04629e8df2141eb192bcb2070abdbeeb872e551acbaba2bbf
languageName: node
linkType: hard

Expand Down Expand Up @@ -7532,7 +7544,7 @@ __metadata:
languageName: node
linkType: hard

"encoding@npm:^0.1.11, encoding@npm:^0.1.13":
"encoding@npm:^0.1.13":
version: 0.1.13
resolution: "encoding@npm:0.1.13"
dependencies:
Expand Down Expand Up @@ -7664,13 +7676,13 @@ __metadata:
linkType: hard

"es5-ext@npm:^0.10.35, es5-ext@npm:^0.10.50":
version: 0.10.58
resolution: "es5-ext@npm:0.10.58"
version: 0.10.59
resolution: "es5-ext@npm:0.10.59"
dependencies:
es6-iterator: ^2.0.3
es6-symbol: ^3.1.3
next-tick: ^1.1.0
checksum: 428be2b15462e4debfaf14a395ad0461f46b74f9b66e47e1e06e701ba09c3db4adbf4646408cbc441f866f3228f05ce761a1d38009cf018e11e6aa69a0ea444a
checksum: 3b931910d90eec2c5266f714fdef2e71b58ba3e9139d054ac0cb1c90db5b4a41989dd490885e037665450f1a4fb778b2ee8daccb6e1a5d9a07f853fd92018da6
languageName: node
linkType: hard

Expand Down Expand Up @@ -11316,7 +11328,7 @@ __metadata:
languageName: node
linkType: hard

"is-stream@npm:^1.0.0, is-stream@npm:^1.0.1":
"is-stream@npm:^1.0.0":
version: 1.1.0
resolution: "is-stream@npm:1.1.0"
checksum: 063c6bec9d5647aa6d42108d4c59723d2bd4ae42135a2d4db6eadbd49b7ea05b750fd69d279e5c7c45cf9da753ad2c00d8978be354d65aa9f6bb434969c6a2ae
Expand Down Expand Up @@ -12254,16 +12266,16 @@ __metadata:
linkType: hard

"lmdb@npm:^2.0.2":
version: 2.2.5
resolution: "lmdb@npm:2.2.5"
version: 2.2.6
resolution: "lmdb@npm:2.2.6"
dependencies:
msgpackr: ^1.5.4
nan: ^2.14.2
node-gyp: latest
node-gyp-build: ^4.2.3
ordered-binary: ^1.2.4
weak-lru-cache: ^1.2.2
checksum: 739d85ea99729831ff339c98d6d10b8570fd18a8bce90142a3e7f5bcbfa397f6335f099cd19b5d026904c4c7c6e2fc0165ccfeafa8514a1bf6f9c0870116466e
checksum: 8df512625293e82472e93b9c092b05a736b128c5fdb1798a5ef15f1a271c53be410bb113f3dd07a991d9605f9e452fb04fa1efe5d6e8dce3ffca178dbb88a980
languageName: node
linkType: hard

Expand Down Expand Up @@ -12558,9 +12570,9 @@ __metadata:
linkType: hard

"lru-cache@npm:^7.5.1":
version: 7.5.1
resolution: "lru-cache@npm:7.5.1"
checksum: f6980281c6ae4e58254d68b2d7878d7abb21c366a7ee527687f4a27bcbf7576f923517285d2fbd4b6a45b5eebdc66b4c565b55a8b49d5dc1babd65a912c26367
version: 7.7.1
resolution: "lru-cache@npm:7.7.1"
checksum: f362c5a2cfa8ad6fe557ec43dc1b7a9695cce84a5652a43ff813609f782f5da576631e7dfad41878bf19a7a69438f38375178635ee80de269aa314280ca2f59e
languageName: node
linkType: hard

Expand Down Expand Up @@ -13529,14 +13541,7 @@ __metadata:
languageName: node
linkType: hard

"node-fetch@npm:2.6.1":
version: 2.6.1
resolution: "node-fetch@npm:2.6.1"
checksum: 91075bedd57879117e310fbcc36983ad5d699e522edb1ebcdc4ee5294c982843982652925c3532729fdc86b2d64a8a827797a745f332040d91823c8752ee4d7c
languageName: node
linkType: hard

"node-fetch@npm:^2.6.1":
"node-fetch@npm:^2.6.7":
version: 2.6.7
resolution: "node-fetch@npm:2.6.7"
dependencies:
Expand All @@ -13550,16 +13555,6 @@ __metadata:
languageName: node
linkType: hard

"node-fetch@npm:~1.7.1":
version: 1.7.3
resolution: "node-fetch@npm:1.7.3"
dependencies:
encoding: ^0.1.11
is-stream: ^1.0.1
checksum: 3bb0528c05d541316ebe52770d71ee25a6dce334df4231fd55df41a644143e07f068637488c18a5b0c43f05041dbd3346752f9e19b50df50569a802484544d5b
languageName: node
linkType: hard

"node-gyp-build@npm:^4.2.0, node-gyp-build@npm:^4.2.3, node-gyp-build@npm:^4.3.0":
version: 4.3.0
resolution: "node-gyp-build@npm:4.3.0"
Expand Down Expand Up @@ -18446,9 +18441,9 @@ __metadata:
linkType: hard

"undici@npm:^4.14.1":
version: 4.15.1
resolution: "undici@npm:4.15.1"
checksum: 13b264d4966de105e211e1ca9433e2d8be5fcfe85e4cafea6b97c4685df3364bc8bc9e9b27796ce400e8a1e45e92a65b1453fcb499557e4f5c013af18f194852
version: 4.16.0
resolution: "undici@npm:4.16.0"
checksum: 5e88c2b3381085e25ed1d1a308610ac7ee985f478ac705af7a8e03213536e10f73ef8dd8d85e6ed38948d1883fa0ae935e04357c317b0f5d3d3c0211d0c8c393
languageName: node
linkType: hard

Expand Down