From 2fd87edf2cd215e04ec57738c439662b502763c6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 27 Dec 2023 17:40:50 +0000 Subject: [PATCH] fix: packages/mymonero-exchange-helper/package.json & packages/mymonero-exchange-helper/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857 --- .../package-lock.json | 98 ++++++++++++++----- .../mymonero-exchange-helper/package.json | 2 +- 2 files changed, 75 insertions(+), 25 deletions(-) diff --git a/packages/mymonero-exchange-helper/package-lock.json b/packages/mymonero-exchange-helper/package-lock.json index 682e140c..1b0526d8 100644 --- a/packages/mymonero-exchange-helper/package-lock.json +++ b/packages/mymonero-exchange-helper/package-lock.json @@ -5,52 +5,102 @@ "requires": true, "dependencies": { "@mymonero/mymonero-bigint": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/@mymonero/mymonero-bigint/-/mymonero-bigint-1.1.3.tgz", - "integrity": "sha512-tOBWdWh9I6bzB2wAXP/QkkNr4HhxuYWbgwOwFzplhKoWb+uFn4FNDSX2DeRy8KnLeEuCWUGWi8BH7MKRcuAvUQ==" + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/@mymonero/mymonero-bigint/-/mymonero-bigint-3.0.0.tgz", + "integrity": "sha512-36ywDDmC1qCJ4n5fKjFgljZfw4hGlD7tpkoAd6KTzTqtew/zNcxl43n4DybpbRYpX0d2B2YQ79EnS+joBEFVaA==" }, "@mymonero/mymonero-exchange": { - "version": "1.1.11", - "resolved": "https://registry.npmjs.org/@mymonero/mymonero-exchange/-/mymonero-exchange-1.1.11.tgz", - "integrity": "sha512-MPOhrHbY3n+sZE/7Swo4tOytXd9+lN3xavTQqhRJBx32d0ujuLoP37pD4fpF0qmscA+qEegxdtebNVo/HgHOqw==", + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/@mymonero/mymonero-exchange/-/mymonero-exchange-3.0.0.tgz", + "integrity": "sha512-7feu0vb1PAznhU1I+uWqaRdpjhmxVuGGNp+gf351Ih+JKaI2k80clo7srY/H/ihr82L9zVejryM3NvYdaxwI9g==", "requires": { - "axios": "^0.21.1", + "axios": "^0.21.3", "process": "^0.11.10" + }, + "dependencies": { + "axios": { + "version": "0.21.4", + "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.4.tgz", + "integrity": "sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==", + "requires": { + "follow-redirects": "^1.14.0" + } + } } }, "@mymonero/mymonero-money-format": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/@mymonero/mymonero-money-format/-/mymonero-money-format-1.1.3.tgz", - "integrity": "sha512-7HYdT9eZY0B+a0kjNycaRWhAybc/mYtt4Z0R1hpbbdOj3S7ntgiSJa12zCRseed6WGZpgt7eK0lUSC4QrB1iFg==", + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/@mymonero/mymonero-money-format/-/mymonero-money-format-3.0.0.tgz", + "integrity": "sha512-1cD7+e5HScW3l7apgB5RjT57vcEEIn6iv2d4AEpQlWem54qIq34X/eEXDZzfhX1YlYIws4W8Ch/+oKjkaJggng==", "requires": { - "@mymonero/mymonero-bigint": "^1.1.3" + "@mymonero/mymonero-bigint": "^3.0.0" } }, + "asynckit": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", + "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==" + }, "axios": { - "version": "0.21.1", - "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.1.tgz", - "integrity": "sha512-dKQiRHxGD9PPRIUNIWvZhPTPpl1rf/OxTYKsqKUDjBwYylTvV7SjSHJb9ratfyzM6wCdLCOYLzs73qpg5c4iGA==", + "version": "1.6.3", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz", + "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==", + "requires": { + "follow-redirects": "^1.15.0", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" + } + }, + "combined-stream": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz", + "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==", "requires": { - "follow-redirects": "^1.10.0" + "delayed-stream": "~1.0.0" } }, + "delayed-stream": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz", + "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==" + }, "follow-redirects": { - "version": "1.14.1", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.1.tgz", - "integrity": "sha512-HWqDgT7ZEkqRzBvc2s64vSZ/hfOceEol3ac/7tKwzuvEyWx3/4UegXh5oBOIotkGsObyk3xznnSRVADBgWSQVg==" - }, - "mymonero-exchange": { - "version": "0.1.5", - "resolved": "https://registry.npmjs.org/mymonero-exchange/-/mymonero-exchange-0.1.5.tgz", - "integrity": "sha512-KbRhIqI4FgsXKGqmecnOQ+9sGXz5/I2YEtkucvud7z8uZTMcnEycfDaVzq3RtqyChxTt4cGoYAms5/AVsdzhxw==", + "version": "1.15.3", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz", + "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q==" + }, + "form-data": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz", + "integrity": "sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==", "requires": { - "axios": "^0.21.0" + "asynckit": "^0.4.0", + "combined-stream": "^1.0.8", + "mime-types": "^2.1.12" + } + }, + "mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==" + }, + "mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", + "requires": { + "mime-db": "1.52.0" } }, "process": { "version": "0.11.10", "resolved": "https://registry.npmjs.org/process/-/process-0.11.10.tgz", "integrity": "sha1-czIwDoQBYb2j5podHZGn1LwW8YI=" + }, + "proxy-from-env": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", + "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==" } } } diff --git a/packages/mymonero-exchange-helper/package.json b/packages/mymonero-exchange-helper/package.json index 772133e6..62ca74e7 100644 --- a/packages/mymonero-exchange-helper/package.json +++ b/packages/mymonero-exchange-helper/package.json @@ -10,7 +10,7 @@ "@mymonero/mymonero-bigint": "^3.0.0", "@mymonero/mymonero-exchange": "^3.0.0", "@mymonero/mymonero-money-format": "^3.0.0", - "axios": "^0.21.3" + "axios": "^1.6.3" }, "exports": { "require": "./index.js",