Skip to content

Conversation

billcastle
Copy link

@billcastle billcastle commented Aug 16, 2024

Dependabots are being raised for elliptic
indutny/elliptic#319

Due to this issue:
Improper Verification of Cryptographic Signature
https://security.snyk.io/vuln/SNYK-JS-ELLIPTIC-7577916

Which was fixed in ellipsis@6.5.7
indutny/elliptic#317

@billcastle billcastle changed the title update ellipsis update outdated elliptic dependency Aug 16, 2024
@billcastle billcastle changed the title update outdated elliptic dependency Bump elliptic Aug 16, 2024
Copy link
Member

@ljharb ljharb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This simply isn’t needed; that’s what the ^ is for. Just update your lockfile.

@ljharb ljharb marked this pull request as draft August 16, 2024 04:17
@PuneetPunamiya
Copy link

PuneetPunamiya commented Sep 5, 2024

Hey, any estimate when can we get this pr merged ?

@ljharb
Copy link
Member

ljharb commented Sep 5, 2024

@PuneetPunamiya never? Read my comment again.

@ljharb ljharb closed this Sep 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants