Skip to content

Refactor chain-client to remove fabric-network dependency #662

@sentientforest

Description

@sentientforest

Refactor chain-client to use fabric-gateway instead of fabric-network -

npm install or npm audit executed in the sdk repository result in 4 high severity warnings that are due to fabric-network no longer receiving updates.

jsrsasign <11.0.0
Severity: high
Marvin Attack of RSA and RSAOAEP decryption in jsrsasign - https://github.com/advisories/GHSA-rh63-9qcf-83gf fix available via npm audit fix --force
Will install [email protected], which is a breaking change node_modules/jsrsasign
fabric-ca-client *
Depends on vulnerable versions of fabric-common
Depends on vulnerable versions of jsrsasign
node_modules/fabric-ca-client
fabric-common >=2.1.1-snapshot.390
Depends on vulnerable versions of jsrsasign
node_modules/fabric-common
fabric-network >=1.4.21-snapshot.1
Depends on vulnerable versions of fabric-common
node_modules/fabric-network

4 high severity vulnerabilities

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions