From c724807488bb407e689081e1ea054759ba1f2a1a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 26 Oct 2024 21:55:23 +0000 Subject: [PATCH] fix: web3.js/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SECP256K1-8237220 --- web3.js/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/web3.js/package.json b/web3.js/package.json index 84240446e258d7..6fe2049ec6aae4 100644 --- a/web3.js/package.json +++ b/web3.js/package.json @@ -71,7 +71,7 @@ "node-fetch": "2", "react-native-url-polyfill": "^1.3.0", "rpc-websockets": "^7.5.0", - "secp256k1": "^4.0.2", + "secp256k1": "^4.0.4", "superstruct": "^0.14.2", "tweetnacl": "^1.0.3" }, @@ -91,7 +91,7 @@ "@rollup/plugin-multi-entry": "^4.0.0", "@rollup/plugin-node-resolve": "^13.0.0", "@rollup/plugin-replace": "^4.0.0", - "@solana/spl-token": "^0.2.0", + "@solana/spl-token": "^0.3.2", "@types/bn.js": "^5.1.0", "@types/bs58": "^4.0.1", "@types/chai": "^4.2.15",