New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade ccxt from 1.12.137 to 1.32.3 #468

Open

snyk-bot wants to merge 1 commit into master from snyk-upgrade-2f3a2442375edeebb324e62064a0dd80

snyk-bot commented Aug 15, 2020

Snyk has created this PR to upgrade ccxt from 1.12.137 to 1.32.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 3833 versions ahead of your current version.
The recommended version was released 21 days ago, on 2020-07-25.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-450202	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Insecure Randomness SNYK-JS-CRYPTOJS-548472	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-559764	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ccxt

from ccxt GitHub release notes

Commit messages

Package name: ccxt

2ce6a35 1.32.3
0851486 okex fetchDeposits, fetchWithdrawals fixes
f7fa91c 1.32.2
c454e86 js/base/functions/number.js TICK_SIZE guard
64f97e9 1.32.1
446b462 ccxt 1.32.0
3d1a896 1.31.100
faeca3d Merge pull request #7357 from An-Net/metainfo-updates
ffedacf 1.31.99
f0bc20d Merge pull request #7356 from An-Net/btctradeua-metainfo-updates
6b18dbb 1.31.98
588032d btcturk metainfo updates
438c763 Merge pull request #7355 from An-Net/btcmarkets-metainfo-updates
652ee34 1.31.97
c34cd90 btctradeua metainfo updates
c27e9b3 Merge pull request #7354 from An-Net/metainfo-updates
12b8ceb btcmarkets metainfo updates
be15177 btcbox metainfo updates
bdef420 1.31.96
174a724 eterbase precisionMode SIGNIFICANT_DIGITS fix #7353
63c0d70 1.31.95
a9ab5aa Merge pull request #7350 from An-Net/metainfo-updates
bfd62aa btcalpha metainfo updates
a5f6dc4 1.31.94

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          fix: upgrade ccxt from 1.12.137 to 1.32.3

cc678e4

Snyk has created this PR to upgrade ccxt from 1.12.137 to 1.32.3.

See this package in npm:
https://www.npmjs.com/package/ccxt

See this project in Snyk:
https://app.snyk.io/org/chainoy1/project/c98727e4-35e6-4602-b349-0f19aaa4599a?utm_source=github&utm_medium=upgrade-pr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet