[Snyk] Upgrade: ethereumjs-util, eth-sig-util, ethjs

[Roseymr]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

ethereumjs-util
from 5.2.0 to 5.2.1 | 1 version ahead of your current version | 4 years ago
on 2020-07-16
eth-sig-util
from 2.5.0 to 2.5.4 | 4 versions ahead of your current version | 4 years ago
on 2021-02-04
ethjs
from 0.3.9 to 0.4.0 | 1 version ahead of your current version | 6 years ago
on 2018-05-11

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	554	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	554	No Known Exploit
	Timing Attack SNYK-JS-ELLIPTIC-511941	554	No Known Exploit
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	554	Proof of Concept
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	554	Proof of Concept
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	554	Proof of Concept

Release notes

Package name: ethereumjs-util

• 5.2.1 - 2020-07-16
• 5.2.0 - 2018-04-27

from ethereumjs-util GitHub release notes

Package name: eth-sig-util

• 2.5.4 - 2021-02-04
  

  Changed

  • Update ethereumjs-abi (#121)
  • Remove unused dependencies (#120)
  • Update minimum tweetnacl to latest version (#124)
• 2.5.3 - 2020-03-16
  

  2.5.3

• 2.5.2 - 2019-11-30
  

  Version 2.5.2

• 2.5.1 - 2019-11-21
• 2.5.0 - 2019-10-21

from eth-sig-util GitHub release notes

Package name: ethjs

• 0.4.0 - 2018-05-11
• 0.3.9 - 2018-05-10

from ethjs GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@types/node@22.5.5	None	0	2.2 MB	types
npm/@types/pbkdf2@3.1.2	None	0	4.52 kB	types
npm/@types/secp256k1@4.0.6	None	0	8.05 kB	types
npm/base-x@3.0.10	None	0	9.36 kB	junderw
npm/blakejs@1.2.1	None	0	156 kB	dcposch
npm/bn.js@4.12.0	None	0	95.7 kB	fanatid
npm/bs58@4.0.1	None	0	4.57 kB	dcousens
npm/bs58check@2.1.2	None	0	4.79 kB	dcousens
npm/elliptic@6.5.7	None	+1	123 kB	indutny
npm/eth-sig-util@2.5.4	None	0	22.1 kB	gudahtt
npm/ethereum-cryptography@0.1.3	None	0	845 kB	alcuadrado
npm/ethereumjs-abi@0.6.8	None	+1	200 kB	holgerd77
npm/ethereumjs-util@5.2.1	None	0	66.8 kB	holgerd77
npm/ethjs-contract@0.2.3	None	+1	2.83 MB	silentcicero
npm/ethjs-query@0.3.8	None	0	599 kB	silentcicero
npm/ethjs@0.4.0	None	0	979 kB	silentcicero
npm/keccak@3.0.4	Transitive: environment	+1	903 kB	fanatid
npm/node-addon-api@2.0.2	None	0	799 kB	nicknaso
npm/node-gyp-build@4.8.2	environment, filesystem	0	13.6 kB	mafintosh
npm/randombytes@2.1.0	None	0	6.36 kB	cwmma
npm/rlp@2.2.7	None	+1	162 kB	ralxz
npm/scrypt-js@3.0.1	None	0	226 kB	ricmoo
npm/secp256k1@4.0.3	None	0	1.89 MB	fanatid
npm/setimmediate@1.0.5	None	0	8.56 kB	domenic
npm/tweetnacl@1.0.3	None	0	175 kB	dchest
npm/undici-types@6.19.8	None	0	84.2 kB	matteo.collina

🚮 Removed packages: npm/bindings@1.3.1, npm/bip66@1.1.5, npm/bn.js@4.11.8, npm/browserify-sha3@0.0.4, npm/drbg.js@1.0.1, npm/elliptic@6.4.1, npm/eth-sig-util@2.5.0, npm/ethereumjs-abi@0.6.5, npm/ethereumjs-util@5.2.0, npm/ethjs-contract@0.2.2, npm/ethjs-query@0.3.7, npm/ethjs@0.3.9, npm/js-sha3@0.6.1, npm/keccak@1.4.0, npm/keccakjs@0.2.3, npm/nan@2.10.0, npm/randombytes@2.0.6, npm/rlp@2.2.1, npm/secp256k1@3.5.2, npm/sha3@1.2.3, npm/tweetnacl@1.0.1

View full report↗︎