fix(security): address CVE-2017-16138

fixes: hyperledger-cacti#1776 Signed-off-by: micoferdinand98 <[email protected]>
micoferdinand98 · Mar 7, 2022 · 84d5253 · 84d5253
1 parent 0fd647d
commit 84d5253
Show file tree

Hide file tree

Showing 4 changed files with 155 additions and 132 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json b/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json
@@ -19,7 +19,7 @@
     "config": "^1.26.1",
     "cookie-parser": "~1.4.3",
     "debug": "~4.1.1",
-    "express": "~4.15.2",
+    "express": "^4.17.3",
     "fabric-ca-client": "1.4.19",
     "fabric-client": "1.4.19",
     "fabric-network": "1.4.19",

diff --git a/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json b/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json
@@ -19,9 +19,9 @@
     "config": "^1.26.1",
     "cookie-parser": "~1.4.3",
     "debug": "~4.1.1",
-    "express": "~4.15.2",
-    "jsonwebtoken": "^8.5.1",
+    "express": "^4.17.3",
     "fast-safe-stringify": "2.1.1",
+    "jsonwebtoken": "^8.5.1",
     "log4js": "^6.4.0",
     "morgan": "~1.8.1",
     "serve-favicon": "~2.4.2",

diff --git a/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json b/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json
@@ -20,7 +20,7 @@
     "config": "^1.26.1",
     "cookie-parser": "~1.4.3",
     "debug": "~4.1.1",
-    "express": "~4.15.2",
+    "express": "^4.17.3",
     "jsonwebtoken": "^8.5.1",
     "log4js": "^6.4.0",
     "morgan": "~1.8.1",