Skip to content

Commit 8644a83

Browse files
authored
deps: update the elliptic to fix a vulnerability (#8374)
**Motivation** Keep the dependencies safe from all vulnerabilities. **Description** - Fix a `critical` level vulnerability. GHSA-fc9h-whq2-v747 It's not critical for our beacon node or validator implementation but used in `@lodestar/prover` package. **Steps to test or reproduce** Run all tests
1 parent c85be4e commit 8644a83

File tree

2 files changed

+6
-5
lines changed

2 files changed

+6
-5
lines changed

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,7 @@
8383
"dns-over-http-resolver": "^2.1.1",
8484
"loupe": "^2.3.6",
8585
"testcontainers/**/nan": "^2.19.0",
86-
"vitest": "3.0.9"
86+
"vitest": "3.0.9",
87+
"elliptic": ">=6.6.1"
8788
}
8889
}

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5999,10 +5999,10 @@ electron@^26.2.2:
59995999
"@types/node" "^18.11.18"
60006000
extract-zip "^2.0.1"
60016001

6002-
[email protected], elliptic@^6.5.3, elliptic@^6.5.4:
6003-
version "6.5.4"
6004-
resolved "https://registry.npmjs.org/elliptic/-/elliptic-6.5.4.tgz"
6005-
integrity sha512-iLhC6ULemrljPZb+QutR5TQGB+pdW6KGD5RSegS+8sorOZT+rdQFbsQFJgvN3eRqNALqJer4oQ16YvJHlU8hzQ==
6002+
[email protected], elliptic@>=6.6.1, elliptic@^6.5.3, elliptic@^6.5.4:
6003+
version "6.6.1"
6004+
resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.6.1.tgz#3b8ffb02670bf69e382c7f65bf524c97c5405c06"
6005+
integrity sha512-RaddvvMatK2LJHqFJ+YA4WysVN5Ita9E35botqIYspQ4TkRAlCicdzKOjlyv/1Za5RyTNn7di//eEV0uTAfe3g==
60066006
dependencies:
60076007
bn.js "^4.11.9"
60086008
brorand "^1.1.0"

0 commit comments

Comments
 (0)