Tags: hyperledger/fabric-gateway
Tags
Update Go dependencies to address vulnerabilities (#774) Address the following (uncalled) vulnerabilities: - CVE-2024-45337 - CVE-2024-45338 Signed-off-by: Mark S. Lewis <[email protected]>
Update release versions (#765) The protobuf update (for Java at least) is significant enough that a minor rather than patch-level version increase is probably warranted. Also update dev dependencies to latest versions. Signed-off-by: Mark S. Lewis <[email protected]>
Use elliptic instead of @noble/curves for Node crypto (#629) @noble/curves makes use of @noble/hashes, which does not function correctly on big-endian systems, and also throws an error on module load if a big-endian system is detected. Revert to using elliptic as the ECDSA signing implementation. Signed-off-by: Mark S. Lewis <[email protected]>
Update Java dependencies to address CVE-2023-2976 (#611) Also update dependencies for Go and Node implementation to stay current. Signed-off-by: Mark S. Lewis <[email protected]>
Update dependencies to address CVE-2022-41723 / GO-2023-1571 Signed-off-by: Mark S. Lewis <[email protected]>
PreviousNext