[Snyk] Security upgrade elliptic from 6.5.2 to 6.5.3 - Githubissues

PeculiarVentures / webcrypto-liner

webcrypto-liner is a polyfill that let's down-level User Agents (like IE/Edge) use libraries that depend on WebCrypto. (Keywords: Javascript, WebCrypto, Shim, Polyfill)

MIT License

149 stars 26 forks source link

[Snyk] Security upgrade elliptic from 6.5.2 to 6.5.3 #77

Closed snyk-bot closed 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	No	Proof of Concept

Commit messages

Package name: elliptic

The new version differs by 2 commits.

8647803 6.5.3
856fe4d signature: prevent malleability and overflows

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

coveralls commented 4 years ago

Coverage remained the same at 79.569% when pulling ef0130cba52c8c47db91267bab916367e26a6145 on snyk-fix-3b83c97833627c6ae08d28f4e776361f into 1aa745c7fcb6aa348a2afc4dec5cf5871dbdda31 on master.