fix(security): address CVE-2017-16138

fixes : hyperledger-cacti#1776 Signed-off-by: micoferdinand98 <[email protected]>
micoferdinand98 · Mar 31, 2022 · a12a8d9 · a12a8d9
1 parent b96806a
commit a12a8d9
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json b/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-plugin-ledger-connector-fabric-socketio",
-  "version": "1.0.0",
+  "version": "1.0.0-rc.3",
   "license": "Apache-2.0",
   "scripts": {
     "start": "cd ./dist && node common/core/bin/www.js",
@@ -16,15 +16,15 @@
     "config": "3.3.7",
     "cookie-parser": "1.4.6",
     "debug": "4.1.1",
-    "express": "4.15.5",
+    "express": "4.17.1",
     "fabric-ca-client": "1.4.19",
     "fabric-client": "1.4.19",
     "fabric-network": "1.4.19",
     "fast-safe-stringify": "2.1.1",
     "js-yaml": "3.14.1",
+    "morgan": "1.10.0",
     "jsonwebtoken": "8.5.1",
     "log4js": "6.4.1",
-    "morgan": "1.10.0",
     "serve-favicon": "2.4.5",
     "shelljs": "0.8.5",
     "socket.io": "4.4.1"
@@ -33,4 +33,4 @@
     "@types/config": "0.0.41",
     "ts-node": "9.1.1"
   }
-}
+}
diff --git a/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json b/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperledger/cactus-plugin-ledger-connector-sawtooth-socketio",
-  "version": "1.0.0",
+  "version": "1.0.0-rc.3",
   "license": "Apache-2.0",
   "scripts": {
     "start": "cd ./dist && node common/core/bin/www.js",
@@ -17,17 +17,17 @@
     "config": "3.3.7",
     "cookie-parser": "1.4.6",
     "debug": "4.1.1",
-    "express": "4.15.5",
+    "express": "4.17.1",
     "js-yaml": "3.14.1",
     "jsonwebtoken": "8.5.1",
     "log4js": "6.4.1",
     "morgan": "1.10.0",
     "serve-favicon": "2.4.5",
     "shelljs": "0.8.5",
-    "socket.io": "4.4.1",
+    "socket.io": "4.1.1",
     "xmlhttprequest": "1.8.0"
   },
   "devDependencies": {
     "@types/config": "0.0.41"
   }
-}
+}