From 2e9743085688bf50ee4f381cecd524944d85140e Mon Sep 17 00:00:00 2001 From: Chris Troutner Date: Sun, 6 Dec 2020 19:56:30 -0800 Subject: [PATCH] fix(bitcore-lib-cash): Upgrading to 8.23.1 to fix vulnerability --- package-lock.json | 38 ++++++++++++-------------------------- package.json | 2 +- 2 files changed, 13 insertions(+), 27 deletions(-) diff --git a/package-lock.json b/package-lock.json index f9c5d10..2a098ed 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2132,9 +2132,9 @@ } }, "bitcore-lib": { - "version": "8.22.2", - "resolved": "https://registry.npmjs.org/bitcore-lib/-/bitcore-lib-8.22.2.tgz", - "integrity": "sha512-atl/RN7x2R/JQMaIgUzX0EQZ+I/d7fTaOoS2/5k+H5POGc2vygWZ9MWpGJi3T9Yb5jM/cT5aFsrDq8s8l6lqgQ==", + "version": "8.23.1", + "resolved": "https://registry.npmjs.org/bitcore-lib/-/bitcore-lib-8.23.1.tgz", + "integrity": "sha512-pYC/w9pE09d61ZKl6TQ7IuIMNKyOBZ97F6wSw+ZZQ40Hm1UW+w+QZimbKKBuUKyr4+QuOPTDw4XUWgbUGbSZIQ==", "requires": { "bech32": "=1.1.3", "bn.js": "=4.11.8", @@ -2158,42 +2158,28 @@ } }, "bitcore-lib-cash": { - "version": "8.21.0", - "resolved": "https://registry.npmjs.org/bitcore-lib-cash/-/bitcore-lib-cash-8.21.0.tgz", - "integrity": "sha512-vQs+b8AbJDccgDk8q5woqG4bSOFA0Mz5SuAhM7rH3VclbYwKSsEM4u3G2QjUGOnF5X3Ts7Dc683qoDyccEz5Jw==", + "version": "8.23.1", + "resolved": "https://registry.npmjs.org/bitcore-lib-cash/-/bitcore-lib-cash-8.23.1.tgz", + "integrity": "sha512-QenfM9v5L4UdicRbmMYQbxeNqJjzifBT7DQbK0ambqkxiaUi7k5qY62Gx0N2GIdY5B+edmMib+xCbadaHRTN+w==", "requires": { - "bitcore-lib": "^8.21.0", + "bitcore-lib": "^8.23.1", "bn.js": "=4.11.8", "bs58": "^4.0.1", "buffer-compare": "=1.1.1", - "elliptic": "=6.4.0", + "elliptic": "^6.5.3", "inherits": "=2.0.1", - "lodash": "=4.17.15" + "lodash": "^4.17.20" }, "dependencies": { - "elliptic": { - "version": "6.4.0", - "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.4.0.tgz", - "integrity": "sha1-ysmvh2LIWDYYcAPI3+GT5eLq5d8=", - "requires": { - "bn.js": "^4.4.0", - "brorand": "^1.0.1", - "hash.js": "^1.0.0", - "hmac-drbg": "^1.0.0", - "inherits": "^2.0.1", - "minimalistic-assert": "^1.0.0", - "minimalistic-crypto-utils": "^1.0.0" - } - }, "inherits": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz", "integrity": "sha1-sX0I0ya0Qj5Wjv9xn5GwscvfafE=" }, "lodash": { - "version": "4.17.15", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz", - "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==" + "version": "4.17.20", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", + "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" } } }, diff --git a/package.json b/package.json index c39c48f..1409257 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "@psf/bch-js": "^4.1.1", "apidoc": "^0.23.0", "axios": "^0.19.0", - "bitcore-lib-cash": "^8.20.3", + "bitcore-lib-cash": "^8.23.1", "body-parser": "^1.18.3", "cookie-parser": "~1.4.3", "cors": "^2.8.3",