Skip to content

Commit

Permalink
build: bump elliptic to invulnerable version
Browse files Browse the repository at this point in the history
  • Loading branch information
fionnachan committed Nov 1, 2024
1 parent 0d66fd7 commit b212eba
Show file tree
Hide file tree
Showing 3 changed files with 6 additions and 14 deletions.
10 changes: 1 addition & 9 deletions audit-ci.jsonc
Original file line number Diff line number Diff line change
@@ -1,13 +1,5 @@
{
"$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
"low": true,
"allowlist": [
// https://github.com/advisories/GHSA-fc9h-whq2-v747
// Valid ECDSA signatures erroneously rejected in Elliptic
// Legitimate transactions or communications may be incorrectly flagged as invalid.
// No patched version available yet
// from: arb-token-bridge-ui>@unstoppabledomains/resolution>elliptic
// from: arb-token-bridge-ui>ethers>@ethersproject/signing-key>elliptic
"GHSA-fc9h-whq2-v747"
]
"allowlist": []
}
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
"**/@walletconnect/ethereum-provider": "2.13.1",
"**/@ethersproject/providers/ws": "7.5.10",
"**/@synthetixio/synpress/ws": "8.17.1",
"**/elliptic": "6.5.7"
"**/elliptic": "6.6.0"
},
"keywords": [],
"author": "",
Expand Down
8 changes: 4 additions & 4 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -6365,10 +6365,10 @@ electron-to-chromium@^1.4.431:
resolved "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.431.tgz"
integrity sha512-m232JTVmCawA2vG+1azVxhKZ9Sv1Q//xxNv5PkP5rWxGgQE8c3CiZFrh8Xnp+d1NmNxlu3QQrGIfdeW5TtXX5w==

[email protected], elliptic@6.5.7, elliptic@^6.5.4:
version "6.5.7"
resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.7.tgz#8ec4da2cb2939926a1b9a73619d768207e647c8b"
integrity sha512-ESVCtTwiA+XhY3wyh24QqRGBoP3rEdDUl3EDUUo9tft074fi19IrdpH7hLCMMP3CIj7jb3W96rn8lt/BqIlt5Q==
[email protected], elliptic@6.6.0, elliptic@^6.5.4:
version "6.6.0"
resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.6.0.tgz#5919ec723286c1edf28685aa89261d4761afa210"
integrity sha512-dpwoQcLc/2WLQvJvLRHKZ+f9FgOdjnq11rurqwekGQygGPsYSK29OMMD2WalatiqQ+XGFDglTNixpPfI+lpaAA==
dependencies:
bn.js "^4.11.9"
brorand "^1.1.0"
Expand Down

0 comments on commit b212eba

Please sign in to comment.