fix(security): address CVE-2021-23358 fixes: hyperledger-cacti#1775

Signed-off-by: zondervancalvez <zondervan.v.calvez@accenture.com>
zondervancalvez · Jan 27, 2022 · f6cef49 · f6cef49
1 parent 68eca8e
commit f6cef49
Show file tree

Hide file tree

Showing 6 changed files with 22,338 additions and 21,399 deletions.
diff --git a/package.json b/package.json
@@ -105,8 +105,8 @@
     "git-cz": "4.7.6",
     "globby": "12.0.0",
     "google-protobuf": "3.18.0-rc.2",
-    "grpc-tools": "1.11.2",
     "grpc_tools_node_protoc_ts": "5.3.1",
+    "grpc-tools": "1.11.2",
     "husky": "7.0.1",
     "inquirer": "8.1.2",
     "jest": "27.0.6",
@@ -140,5 +140,8 @@
     "webpack": "5.50.0",
     "webpack-bundle-analyzer": "4.4.2",
     "webpack-cli": "4.7.2"
+  },
+  "dependencies": {
+    "underscore": "^1.13.2"
   }
 }
diff --git a/packages/cactus-plugin-htlc-eth-besu/package.json b/packages/cactus-plugin-htlc-eth-besu/package.json
@@ -86,7 +86,7 @@
     "openapi-types": "9.1.0",
     "typescript-optional": "2.0.1",
     "web3": "1.5.2",
-    "web3-eea": "0.11.0"
+    "web3js-quorum": "^21.7.0-rc1"
   },
   "devDependencies": {
     "@hyperledger/cactus-plugin-keychain-memory": "1.0.0-rc.3",

diff --git a/packages/cactus-plugin-ledger-connector-besu/package.json b/packages/cactus-plugin-ledger-connector-besu/package.json
@@ -83,9 +83,9 @@
     "typescript-optional": "2.0.1",
     "web3": "1.5.2",
     "web3-core": "1.5.2",
-    "web3-eea": "0.11.0",
     "web3-eth": "1.5.2",
-    "web3-utils": "1.5.2"
+    "web3-utils": "1.5.2",
+    "web3js-quorum": "^21.7.0-rc1"
   },
   "devDependencies": {
     "@hyperledger/cactus-plugin-keychain-memory": "1.0.0-rc.3",

diff --git a/packages/cactus-test-plugin-htlc-eth-besu/package.json b/packages/cactus-test-plugin-htlc-eth-besu/package.json
@@ -71,7 +71,7 @@
     "axios": "0.21.4",
     "key-encoder": "2.0.3",
     "web3": "1.5.2",
-    "web3-eea": "0.11.0"
+    "web3js-quorum": "^21.7.0-rc1"
   },
   "devDependencies": {
     "@types/express": "4.17.13"

diff --git a/packages/cactus-test-plugin-ledger-connector-besu/package.json b/packages/cactus-test-plugin-ledger-connector-besu/package.json
@@ -68,6 +68,6 @@
     "@hyperledger/cactus-test-tooling": "1.0.0-rc.3",
     "key-encoder": "2.0.3",
     "web3": "1.5.2",
-    "web3-eea": "0.11.0"
+    "web3js-quorum": "^21.7.0-rc1"
   }
 }