fix(security): address CVE-2017-16138

fixes:hyperledger-cacti#1776 Signed-off-by: micoferdinand98 <[email protected]>
micoferdinand98 · Mar 11, 2022 · a29477c · a29477c
1 parent 23f95a3
commit a29477c
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json b/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json
@@ -19,7 +19,7 @@
     "config": "^1.26.1",
     "cookie-parser": "~1.4.3",
     "debug": "~4.1.1",
-    "express": "^4.17.3",
+    "express": "4.17.3",
     "fabric-ca-client": "1.4.19",
     "fabric-client": "1.4.19",
     "fabric-network": "1.4.19",

diff --git a/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json b/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json
@@ -19,7 +19,7 @@
     "config": "^1.26.1",
     "cookie-parser": "~1.4.3",
     "debug": "~4.1.1",
-    "express": "^4.17.3",
+    "express": "4.17.3",
     "fast-safe-stringify": "2.1.1",
     "jsonwebtoken": "^8.5.1",
     "log4js": "^6.4.0",

diff --git a/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json b/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json
@@ -20,7 +20,7 @@
     "config": "^1.26.1",
     "cookie-parser": "~1.4.3",
     "debug": "~4.1.1",
-    "express": "^4.17.3",
+    "express": "4.17.3",
     "jsonwebtoken": "^8.5.1",
     "log4js": "^6.4.0",
     "morgan": "1.10.0",

diff --git a/yarn.lock b/yarn.lock
@@ -10471,7 +10471,7 @@ [email protected], express@^4.14.0, express@^4.17.1:
     utils-merge "1.0.1"
     vary "~1.1.2"
 
-express@^4.17.3:
+[email protected]:
   version "4.17.3"
   resolved "https://registry.yarnpkg.com/express/-/express-4.17.3.tgz#f6c7302194a4fb54271b73a1fe7a06478c8f85a1"
   integrity sha512-yuSQpz5I+Ch7gFrPCk4/c+dIBKlQUxtgwqzph132bsT6qhuzss6I8cLJQz7B3rFblzd6wtcI0ZbGltH/C4LjUg==