fix(security): address CVE-2017-16138 -m fixes: hyperledger-cacti#1776

Signed-off-by: micoferdinand98 <[email protected]>
micoferdinand98 · Apr 28, 2022 · d10e24b · d10e24b
1 parent b8be5bd
commit d10e24b
Show file tree

Hide file tree

Showing 4 changed files with 120 additions and 126 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json b/packages/cactus-plugin-ledger-connector-fabric-socketio/package.json
@@ -16,7 +16,7 @@
     "config": "3.3.7",
     "cookie-parser": "1.4.6",
     "debug": "4.1.1",
-    "express": "4.15.5",
+    "express": "4.17.3",
     "fabric-ca-client": "1.4.19",
     "fabric-client": "1.4.19",
     "fabric-network": "1.4.19",

diff --git a/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json b/packages/cactus-plugin-ledger-connector-go-ethereum-socketio/package.json
@@ -13,10 +13,11 @@
   "dependencies": {
     "@types/node": "14.17.32",
     "body-parser": "1.17.2",
+    "cbor": "6.0.1",
     "config": "3.3.7",
     "cookie-parser": "1.4.6",
     "debug": "4.1.1",
-    "express": "4.15.5",
+    "express": "4.17.3",
     "fast-safe-stringify": "2.1.1",
     "js-yaml": "3.14.1",
     "jsonwebtoken": "8.5.1",

diff --git a/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json b/packages/cactus-plugin-ledger-connector-sawtooth-socketio/package.json
@@ -17,7 +17,7 @@
     "config": "3.3.7",
     "cookie-parser": "1.4.6",
     "debug": "4.1.1",
-    "express": "4.15.5",
+    "express": "4.17.3",
     "js-yaml": "3.14.1",
     "jsonwebtoken": "8.5.1",
     "log4js": "6.4.1",