[Snyk] Fix for 1 vulnerabilities

[Mustafaovais]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • lp_ui/package.json
  • lp_ui/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	828/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.7	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8187303	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @certusone/wormhole-sdk

The new version differs by 250 commits.

• 83e0f05 remove explorer related code
• 24d3818 docs: add proto generation info
• 517bfaf docs: add comment conventions
• f60e666 node: commit proto and matching test fixes Provide generated proto files for go wormhole-foundation/wormhole#1769
• 9fa943e node: support for heartbeat spying fixes Provide heartbeat update subscription mechanism wormhole-foundation/wormhole#1768
• 61454a3 Node: remove support for Ropsten (Node: remove support for Ropsten wormhole-foundation/wormhole#1818)
• 3b8683f solana/tilt: run registrations in parallel (Make Solana ready faster by improving chain registration submissions wormhole-foundation/wormhole#1826)
• 0e643cd Revert SDK version bump
• 4ca4220 SDK: Remove support for Ropsten
• e409629 add BatchVAA structs to Go sdk(go sdk - BatchVAA structs wormhole-foundation/wormhole#1700)
• 346b685 Node: Just delete the PYTHNET messages
• 391781d Node: Disable PYTHNET log messages
• e7554f8 rust: Run rustfmt and clippy in CI
• 676d729 sdk/rust: Fix clippy warnings
• cb20d47 sdk/rust: Fix formatting
• f7cc16a terra: Fix clippy warnings
• 68ae3ff terra: Fix formatting
• 8d6bf74 cosmwasm: Fix clippy warnings
• dedcea3 cosmwasm: Fix formatting
• bac99e9 evm: add token and nft bridge interface (evm: add token and nft bridge interface wormhole-foundation/wormhole#1710)
• ddb2afd WH-1816: add new .gitignore @ Closes algorand tests are leaving debris in the local repo wormhole-foundation/wormhole#1816
• 25d2f24 ethereum: deploy test token nonce race condition fix
• 914aa99 node: arbitrum watcher fix (node: arbitrum watcher fix wormhole-foundation/wormhole#1812)
• af633ce wormchain: add back protobuf

See the full diff

Package name: @solana/wallet-adapter-wallets

The new version differs by 250 commits.

• 1377942 update packages in readme
• 2d26de6 Merge pull request Refactor for message passing wormhole-foundation/wormhole#199 from steveluscher/more-reliable-localstorage
• 7d07c82 update yarn.lock
• 1ebb10c don't compile tests to lib dir
• 1f6ce47 add feature to other packages
• d3f5cb6 log errors if localStorage is unavailable
• e3a1e16 run prettier
• b8c0816 Merge branch 'master' into more-reliable-localstorage
• ccc1007 organize installs
• 2c126a8 [fix] Localstorage no longer fatals the wallet provider in private windows
• 6ee7d75 [fix] Writes through useLocalStorage no longer fatal if localStorage does not exist
• 314aabc [fix] useLocalStorage now returns the default value in the event that localstorage fatals on read
• 6e4a2bd [chore] A suite of tests for useLocalStorage
• 52c5195 Merge pull request Fix *.so copy in solana-devnet, correct crate feature for cli+agent wormhole-foundation/wormhole#198 from solana-labs/fix-blocto
• d3053bc blocto: update version
• 51e9559 Merge pull request Polkadot Support wormhole-foundation/wormhole#195 from solana-labs/wallets-reorg
• 161ae6f base: add explanation of brand/tagged type
• 443d2a4 vue: update ready state
• d12f412 starter: add missing dependency to fix build
• da5d860 tokenpocket: handle wallet disconnect
• e53850e sollet: window.sollet is detected async
• a76bd10 base: add default connected getter to base adapter
• f7d74b7 root: update lockfile
• 02e24f3 vue-ui: remove wallets package reference

See the full diff

Package name: @solana/web3.js

The new version differs by 250 commits.

• 7141986 fix: replace tweetnacl impl
• ef5a6da Update rollup script to exclude new secp256k1 and hmac/sha256 dependencies (#27428)
• f8b5608 [web3.js] Replace sha256 and secp256k1 impls (#27390)
• 8e30e66 feat: add support for creating version 0 transactions (#27142)
• 4f2d052 [web3.js] Eliminate dependency on `URL` class (#27349)
• 8d5e263 chore: bump eslint-plugin-mocha from 10.0.4 to 10.1.0 in /web3.js (#27332)
• 40022a3 chore: bump @ commitlint/travis-cli from 17.0.0 to 17.0.3 in /web3.js (#27331)
• eaa318d chore: bump @ babel/register from 7.17.7 to 7.18.9 in /web3.js (#27330)
• 9abf36c chore: bump @ babel/core from 7.18.0 to 7.18.13 in /web3.js (#27329)
• 2cc39ab VoteProgram.safeWithdraw function to safeguard against accidental vote account closures (#26586)
• 55652a0 chore: bump @ babel/preset-env from 7.18.0 to 7.18.10 in /web3.js (#27138)
• 659067b chore: add constant for pubkey byte length (#27134)
• 895de4c feat: add getAddressLookupTable method to Connection (#27127)
• 732f8aa chore: restructure utils code
• 81a1d2c chore: restructure program files
• 53dd609 chore: restucture message files
• 9823da7 chore: restructure transaction files
• 7d05857 feat: support minContextSlot in getParsedAccountInfo method (#27084)
• d7ed86a chore: annotate more types as deprecated (#27067)
• bbfd5d3 feat: handle `loadedAddresses` field in tx meta responses (#27065)
• 3708ea1 chore: update `tweetnacl` dependency to 1.0.3 explicitly (#26907)
• 2dc0551 chore: Update web3.js README to ask that contributions and issues regarding web3.js be filed against the monorepo and not the mirror
• 091faf5 fix: (web3.js) clear the idle timer whenever the websocket closes (#26734)
• 85a6a3f feat(web3.js): add support for get stake minimum delegation (#26682)

See the full diff

Package name: react-scripts

The new version differs by 69 commits.

• 221e511 Publish
• 6a3315b Update CONTRIBUTING.md
• 5614c87 Add support for Tailwind (#11717)
• 657739f chore(test): make all tests install with `npm ci` (#11723)
• 20edab4 fix(webpackDevServer): disable overlay for warnings (#11413)
• 69321b0 Remove cached lockfile (#11706)
• 3afbbc0 Update all dependencies (#11624)
• f5467d5 feat(eslint-config-react-app): support ESLint 8.x (#11375)
• e8319da [WIP] Fix integration test teardown / cleanup and missing yarn installation (#11686)
• c7627ce Update webpack and dev server (#11646)
• f85b064 The default port used by `serve` has changed (#11619)
• 544befe Update package.json (#11597)
• 9d0369b Fix ESLint Babel preset resolution (#11547)
• d7b23c8 test(create-react-app): assert for exit code (#10973)
• 1465357 Prepare 5.0.0 alpha release
• 3880ba6 Remove dependency pinning (#11474)
• 8b9fbee Update CODEOWNERS
• cacf590 Bump template dependency version (#11415)
• 5cedfe4 Bump browserslist from 4.14.2 to 4.16.5 (#11476)
• 50ea5ad allow CORS on webpack-dev-server (#11325)
• 63bba07 Upgrade jest and related packages from 26.6.0 to 27.1.0 (#11338)
• 960b21e Bump immer from 8.0.4 to 9.0.6 (#11364)
• 134cd3c Resolve dependency issues in v5 alpha (#11294)
• b45ae3c Update CONTRIBUTING.md

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.