bosonprotocol / reference-backend

[DEPRECATED] An example backend application for Boson Protocol
GNU Lesser General Public License v3.0
10 stars 0 forks source link

[Snyk] Security upgrade ethers from 5.4.5 to 5.4.7 #195

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ETHERS-1586048
No Proof of Concept
Commit messages
Package name: ethers The new version differs by 13 commits.
  • 4166b27 Updated dist files.
  • 32a6b2a Fix parseUints with excess zeros and fix ReDoS issue (#2016, #1975, #1976).
  • f2a32d0 docs: added provider.FeeData
  • 5762a1f updated dist files.
  • 8320d53 Temporarily remove the block miner for clique-based networks from CI testing (#1967).
  • c41b89a updated dist files.
  • b6a061e More readable errors involving Uint8Arrays.
  • a662490 Added Deferred Error support to Description objects to extent Interface parse methods (#1894).
  • bdb54ac docs: added cookbook entry to compute raw transaction (#1857).
  • 32a90b6 docs: added Alchemy tutorial
  • 95b87f6 docs: added BigNumber.toBigInt (#1799).
  • 017b1fe Fix address coder to prepare non-hexdatastring addresses as hexdatastring (#1906).
  • accb852 Removed temporary code for better errors needed until Alchemy added EIP-1559 support (#1893).
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic