search

Open-Attestation / open-attestation

Meta framework for providing digital provenance and integrity to documents.
https://openattestation.com
Apache License 2.0
54 stars 18 forks source link

[Snyk] Security upgrade ethers from 5.4.3 to 5.4.7 #206

Closed snyk-bot closed 10 months ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ETHERS-1586048		 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: ethers The new version differs by 30 commits.
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
  • f0b3bc3 Updated dist files.
  • 78e4273 Fxied getBlockWithTransactions results (1858).
  • dd09bf0 docs: dded code examples for Contract (#982).
  • 4b163e9 docs: added dynamic localSigner
  • aacb95c docs: added struct encoding example (#1147, #1301, #1302).
  • e6315a6 docs: remove need to restart dev node after each run.
  • 3ac91a4 docs: added StaticJsonRpcProvider (#1514, #1531).
  • 2dd5c1a docs: Fixed topicset example (#1538).
  • 2653449 docs: updated transactions for EIP-1559.
  • cddb038 docs: added API for custom error coding.
  • e80f8dd docs: updates for EIP-1559 (#1777).
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic