Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Manually update elliptic to v6.5.7 for security update #774

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Manually update elliptic to v6.5.7 for security update #774

wants to merge 1 commit into from

Conversation

PeterDaveHello
Copy link
Contributor

Use npm audit fix to update one dependency in the lock.

elliptic v2.0.0 - 6.5.6 affected:

@PeterDaveHello
Manually update elliptic to v6.5.7 for security update
4b538a2 
Use `npm audit fix` to update one dependency in the lock.

elliptic v2.0.0 - 6.5.6 affected:
- Elliptic's ECDSA missing check for whether leading bit of r and s is zero - GHSA-977x-g7h5-7qgw
- Elliptic's EDDSA missing signature length check - GHSA-f7q4-pwc6-w24p
- Elliptic allows BER-encoded signatures - GHSA-49q7-c7j4-3p7m
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@PeterDaveHello