chore(deps): specify explicit bl version 1.2.3 in fabric plugin

This is necessary so that we can resolve the issue of us being susceptible to this CVE: GHSA-pp7h-53gx-mx7r Fixes #498 Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
hyperledger-cacti · Jan 26, 2021 · 14c8c5e · 14c8c5e
1 parent bcf4a30
commit 14c8c5e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-fabric/package-lock.json b/packages/cactus-plugin-ledger-connector-fabric/package-lock.json
diff --git a/packages/cactus-plugin-ledger-connector-fabric/package.json b/packages/cactus-plugin-ledger-connector-fabric/package.json
@@ -83,6 +83,7 @@
     "@hyperledger/cactus-common": "0.3.0",
     "@hyperledger/cactus-core": "0.3.0",
     "@hyperledger/cactus-core-api": "0.3.0",
+    "bl": "1.2.3",
     "express": "4.17.1",
     "express-openapi-validator": "3.16.11",
     "fabric-client": "1.4.13",