Commit 5d44d43
bug: override transitive elliptic 6.4.1 -> 6.6.1 to fix CVE-2024-48948 (ECDSA signature verification)
elliptic is pulled in via browserify > crypto-browserify > browserify-sign and cannot be bumped
in-range without regenerating the tree, so pin it with an npm override. 6.6.1 also covers
CVE-2024-42459/42460/42461 and SNYK-JS-ELLIPTIC-8720086.
Co-Authored-By: sumit.shatwara <sumitshatwara@gmail.com>1 parent d240896 commit 5d44d43
2 files changed
Lines changed: 48 additions & 28 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
53 | 53 | | |
54 | 54 | | |
55 | 55 | | |
56 | | - | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
| 59 | + | |
57 | 60 | | |
0 commit comments