Bump Elliptic to resolve low CVE.

transcend-io · Aug 19, 2024 · a8e2f20 · a8e2f20
1 parent 2f13704
commit a8e2f20
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/package.json b/package.json
@@ -51,6 +51,10 @@
     "tsconfig.json"
   ],
   "homepage": "https://github.com/transcend-io/penumbra#readme",
+  "resolutions": {
+    "elliptic@npm:^6.5.5": "6.5.7",
+    "elliptic@npm:^6.5.3": "6.5.7"
+  },
   "dependencies": {
     "@transcend-io/conflux": "^4.1.0",
     "@transcend-io/remote-web-streams": "1.0.5",

diff --git a/yarn.lock b/yarn.lock
@@ -4335,9 +4335,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"elliptic@npm:^6.5.3, elliptic@npm:^6.5.5":
-  version: 6.5.6
-  resolution: "elliptic@npm:6.5.6"
+"elliptic@npm:6.5.7":
+  version: 6.5.7
+  resolution: "elliptic@npm:6.5.7"
   dependencies:
     bn.js: "npm:^4.11.9"
     brorand: "npm:^1.1.0"
@@ -4346,7 +4346,7 @@ __metadata:
     inherits: "npm:^2.0.4"
     minimalistic-assert: "npm:^1.0.1"
     minimalistic-crypto-utils: "npm:^1.0.1"
-  checksum: 09377ec924fdb37775d63e5d7e5ebb2845842e6f08880b68265b1108863e968970c4a4e1c43df622078c8262417deec9a04aeb9d34e8d09a9693e19b5454e1df
+  checksum: fbad1fad0a5cc07df83f80cc1f7a784247ef59075194d3e340eaeb2f4dd594825ee24c7e9b0cf279c9f1982efe610503bb3139737926428c4821d4fca1bcf348
   languageName: node
   linkType: hard