From d5f7efbcb92b980b1b0a5f7ab2e40d39504cd3dd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 15 Apr 2024 17:05:48 +0000 Subject: [PATCH] fix: packages/bitcore-wallet-service/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-6139239 --- packages/bitcore-wallet-service/package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/packages/bitcore-wallet-service/package.json b/packages/bitcore-wallet-service/package.json index b7bb1955202..cfbd19618c0 100644 --- a/packages/bitcore-wallet-service/package.json +++ b/packages/bitcore-wallet-service/package.json @@ -24,8 +24,8 @@ "dependencies": { "@sendgrid/mail": "^6.3.1", "async": "^0.9.2", - "bitcore-lib": "^8.6.0", - "bitcore-lib-cash": "^8.6.0", + "bitcore-lib": "^8.22.2", + "bitcore-lib-cash": "^8.22.2", "body-parser": "^1.11.0", "compression": "^1.6.2", "email-validator": "^1.0.1", @@ -33,7 +33,7 @@ "express-rate-limit": "^2.6.0", "inherits": "^2.0.1", "json-stable-stringify": "^1.0.0", - "lodash": "^4.17.15", + "lodash": "^4.17.17", "moment": "^2.10.3", "mongodb": "^2.0.27", "morgan": "^1.9.1", @@ -43,7 +43,7 @@ "preconditions": "^2.2.3", "read": "^1.0.5", "request": "^2.53.0", - "request-promise-native": "^1.0.5", + "request-promise-native": "^1.0.9", "secp256k1": "^3.1.0", "sjcl": "^1.0.2", "socket.io": "^2.2.0",