Skip to content

Commit

Permalink
build(deps): upgrade axios to latest to fix CVE
Browse files Browse the repository at this point in the history 
Details
CVE-2021-3749
high severity
Vulnerable versions: <= 0.21.1
Patched version: 0.21.2
axios is vulnerable to Inefficient Regular Expression Complexity

Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
  • Loading branch information
@petermetz
petermetz committed Sep 22, 2021
1 parent a321616 commit e2fc14f
Show file tree
Hide file tree
Showing 25 changed files with 25 additions and 25 deletions.
2 changes: 1 addition & 1 deletion examples/cactus-example-carbon-accounting-business-logic-plugin/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@
"@hyperledger/cactus-plugin-ledger-connector-fabric": "0.9.0",
"@hyperledger/cactus-plugin-ledger-connector-xdai": "0.9.0",
"async-exit-hook": "2.0.1",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"openapi-types": "9.1.0",
"typescript-optional": "2.0.1",
Expand Down
2 changes: 1 addition & 1 deletion examples/cactus-example-supply-chain-backend/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@
"@hyperledger/cactus-plugin-ledger-connector-quorum": "0.9.0",
"@hyperledger/cactus-test-tooling": "0.9.0",
"async-exit-hook": "2.0.1",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"fabric-network": "2.2.8",
"jose": "1.28.1",
Expand Down
2 changes: 1 addition & 1 deletion examples/cactus-example-supply-chain-business-logic-plugin/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@
"@hyperledger/cactus-plugin-ledger-connector-fabric": "0.9.0",
"@hyperledger/cactus-plugin-ledger-connector-quorum": "0.9.0",
"async-exit-hook": "2.0.1",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"openapi-types": "9.1.0",
"typescript-optional": "2.0.1",
Expand Down
2 changes: 1 addition & 1 deletion extensions/cactus-plugin-object-store-ipfs/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"ipfs-http-client": "51.0.1",
"run-time-error": "1.4.0",
"typescript-optional": "2.0.1",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-cmd-api-server/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"@thream/socketio-jwt": "2.1.1",
"axios": "0.21.1",
"axios": "0.21.4",
"body-parser": "1.19.0",
"compression": "1.7.4",
"convict": "6.0.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-core-api/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -78,6 +78,6 @@
},
"dependencies": {
"@hyperledger/cactus-common": "0.9.0",
"axios": "0.21.1"
"axios": "0.21.4"
}
}
2 changes: 1 addition & 1 deletion packages/cactus-plugin-consortium-manual/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"body-parser": "1.19.0",
"express": "4.17.1",
"jose": "1.28.1",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-htlc-eth-besu-erc20/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"@hyperledger/cactus-plugin-ledger-connector-besu": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"joi": "17.4.2",
"openapi-types": "9.1.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-htlc-eth-besu/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@
"@hyperledger/cactus-plugin-keychain-memory": "0.9.0",
"@hyperledger/cactus-plugin-ledger-connector-besu": "0.9.0",
"@hyperledger/cactus-test-tooling": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"joi": "17.4.2",
"openapi-types": "9.1.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-keychain-aws-sm/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"aws-sdk": "2.965.0",
"axios": "0.21.1",
"axios": "0.21.4",
"http-status-codes": "2.1.4",
"typescript-optional": "2.0.1"
},
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-keychain-azure-kv/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"http-status-codes": "2.1.4",
"typescript-optional": "2.0.1"
},
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-keychain-google-sm/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"http-status-codes": "2.1.4",
"typescript-optional": "2.0.1"
},
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-keychain-memory/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"prom-client": "13.2.0",
"uuid": "8.3.2"
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-keychain-vault/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"http-status-codes": "2.1.4",
"node-vault": "0.9.22",
"prom-client": "13.2.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-ledger-connector-besu/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"joi": "17.4.2",
"openapi-types": "9.1.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-ledger-connector-corda/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express-openapi-validator": "3.10.0",
"internal-ip": "6.2.0",
"joi": "17.4.2",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-ledger-connector-fabric/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"bl": "5.0.0",
"bn.js": "4.12.0",
"express": "4.17.1",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-ledger-connector-iroha/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"@types/google-protobuf": "3.15.3",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"grpc": "1.24.11",
"iroha-helpers-ts": "0.9.25-ss",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-ledger-connector-quorum/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"prom-client": "13.2.0",
"typescript-optional": "2.0.1",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-plugin-ledger-connector-xdai/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
"@hyperledger/cactus-common": "0.9.0",
"@hyperledger/cactus-core": "0.9.0",
"@hyperledger/cactus-core-api": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1",
"joi": "17.4.2",
"openapi-types": "9.1.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-test-plugin-consortium-manual/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@
"@hyperledger/cactus-core-api": "0.9.0",
"@hyperledger/cactus-plugin-consortium-manual": "0.9.0",
"@hyperledger/cactus-plugin-keychain-memory": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"jose": "1.28.1"
}
}
2 changes: 1 addition & 1 deletion packages/cactus-test-plugin-htlc-eth-besu-erc20/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@
"@hyperledger/cactus-plugin-keychain-memory": "0.9.0",
"@hyperledger/cactus-plugin-ledger-connector-besu": "0.9.0",
"@hyperledger/cactus-test-tooling": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"express": "4.17.1"
},
"devDependencies": {
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-test-plugin-htlc-eth-besu/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@
"@hyperledger/cactus-plugin-keychain-memory": "0.9.0",
"@hyperledger/cactus-plugin-ledger-connector-besu": "0.9.0",
"@hyperledger/cactus-test-tooling": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"key-encoder": "2.0.3",
"web3": "1.5.2",
"web3-eea": "0.11.0"
Expand Down
2 changes: 1 addition & 1 deletion packages/cactus-test-tooling/package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@
"homepage": "https://github.com/hyperledger/cactus#readme",
"dependencies": {
"@hyperledger/cactus-common": "0.9.0",
"axios": "0.21.1",
"axios": "0.21.4",
"compare-versions": "3.6.0",
"dockerode": "3.3.0",
"execa": "5.1.1",
Expand Down
2 changes: 1 addition & 1 deletion yarn.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -5513,7 +5513,7 @@ axios@0.21.1:
dependencies:
follow-redirects "^1.10.0"

axios@^0.21.0, axios@^0.21.1:
axios@0.21.4, axios@^0.21.0, axios@^0.21.1:
version "0.21.4"
resolved "https://registry.yarnpkg.com/axios/-/axios-0.21.4.tgz#c67b90dc0568e5c1cf2b0b858c43ba28e2eda575"
integrity sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==
Expand Down

0 comments on commit e2fc14f

Please sign in to comment.