Fix 2 critical security issues

FabricLabs · Dec 27, 2023 · 47aa98b · 47aa98b
1 parent e9436d6
commit 47aa98b
Show file tree

Hide file tree

Showing 3 changed files with 215 additions and 24 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -111,7 +111,7 @@
     "level": "7.0.1",
     "lodash.merge": "4.6.2",
     "macaroon": "3.0.4",
-    "merkletreejs": "0.1.6",
+    "merkletreejs": "0.3.11",
     "minsc": "0.2.0",
     "mkdirp": "1.0.4",
     "nat-upnp-2": "3.0.3",

diff --git a/reports/install.log b/reports/install.log
@@ -1,14 +1,11 @@
 $ npm i
 
-added 695 packages, and audited 696 packages in 35s
+added 714 packages, and audited 715 packages in 49s
 
-79 packages are looking for funding
+83 packages are looking for funding
   run `npm fund` for details
 
-4 vulnerabilities (2 high, 2 critical)
-
-To address all issues possible (including breaking changes), run:
-  npm audit fix --force
+2 high severity vulnerabilities
 
 Some issues need review, and may require choosing
 a different dependency.