fix(security): address CVE-2017-16138

fixes: hyperledger-cacti#1776 Signed-off-by: micoferdinand98 <[email protected]>
micoferdinand98 · Mar 24, 2022 · 67e2ef3 · 67e2ef3
1 parent b96806a
commit 67e2ef3
Show file tree

Hide file tree

Showing 4 changed files with 179 additions and 223 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json b/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json
@@ -11,12 +11,12 @@
     "prepare-docker-build": "cp -af ../../yarn.lock ./dist/yarn.lock"
   },
   "dependencies": {
-    "@types/node": "14.17.32",
-    "body-parser": "1.17.2",
-    "config": "3.3.7",
-    "cookie-parser": "1.4.6",
-    "debug": "4.1.1",
-    "express": "4.15.5",
+    "@types/node": "^14.14.5",
+    "body-parser": "~1.17.1",
+    "config": "^1.26.1",
+    "cookie-parser": "~1.4.3",
+    "debug": "~4.1.1",
+    "express": "4.17.1",
     "fabric-ca-client": "1.4.19",
     "fabric-client": "1.4.19",
     "fabric-network": "1.4.19",

diff --git a/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json b/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json
@@ -11,23 +11,19 @@
     "init-ethereum": "cp -af ../../yarn.lock ./dist/yarn.lock"
   },
   "dependencies": {
-    "@types/node": "14.17.32",
-    "body-parser": "1.17.2",
-    "config": "3.3.7",
-    "cookie-parser": "1.4.6",
-    "debug": "4.1.1",
-    "express": "4.15.5",
+    "@types/node": "^14.14.5",
+    "body-parser": "~1.17.1",
+    "config": "^1.26.1",
+    "cookie-parser": "~1.4.3",
+    "debug": "~4.1.1",
+    "express": "4.17.1",
     "fast-safe-stringify": "2.1.1",
-    "js-yaml": "3.14.1",
-    "jsonwebtoken": "8.5.1",
-    "log4js": "6.4.1",
-    "morgan": "1.10.0",
-    "serve-favicon": "2.4.5",
-    "shelljs": "0.8.5",
-    "socket.io": "4.4.1",
-    "web3": "0.20.7"
-  },
-  "devDependencies": {
-    "@types/config": "0.0.41"
+    "jsonwebtoken": "^8.5.1",
+    "log4js": "^6.4.0",
+    "morgan": "~1.8.1",
+    "serve-favicon": "~2.4.2",
+    "shelljs": "^0.8.4",
+    "socket.io": "4.1.3",
+    "web3": "^0.20.0"
   }
 }
diff --git a/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json b/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json
@@ -11,23 +11,19 @@
     "init-sawtooth": "cp -af ../../yarn.lock ./dist/yarn.lock"
   },
   "dependencies": {
-    "@types/node": "14.17.32",
-    "body-parser": "1.17.2",
-    "cbor": "6.0.1",
-    "config": "3.3.7",
-    "cookie-parser": "1.4.6",
-    "debug": "4.1.1",
-    "express": "4.15.5",
-    "js-yaml": "3.14.1",
-    "jsonwebtoken": "8.5.1",
-    "log4js": "6.4.1",
-    "morgan": "1.10.0",
-    "serve-favicon": "2.4.5",
-    "shelljs": "0.8.5",
-    "socket.io": "4.4.1",
-    "xmlhttprequest": "1.8.0"
-  },
-  "devDependencies": {
-    "@types/config": "0.0.41"
+    "@types/node": "^14.14.5",
+    "body-parser": "~1.17.1",
+    "cbor": "^6.0.1",
+    "config": "^1.26.1",
+    "cookie-parser": "~1.4.3",
+    "debug": "~4.1.1",
+    "express": "4.17.1",
+    "jsonwebtoken": "^8.5.1",
+    "log4js": "^6.4.0",
+    "morgan": "~1.8.1",
+    "serve-favicon": "~2.4.2",
+    "shelljs": "^0.8.4",
+    "socket.io": "4.1.3",
+    "xmlhttprequest": "^1.8.0"
   }
 }