v3-client
v3-client copied to clipboard
Potential vulnerabilities with dependencies
Please update this packages' dependencies.
Potential vulnerabilities
dependency | using | should use |
---|---|---|
ethers | 5.0.18 | 5.6.9 |
web3 | 1.3.0 | 1.7.5 |
Errors generated by npm audit:
: Insecure Credential Storage in web3 : Arbitrary Code Execution in underscore : Use of a Broken or Risky Cryptographic Algorithm : ReDoS in Sec-Websocket-Protocol header : Got allows a redirect to a UNIX socket
This module should indeed really update those dependencies. It causes many problems when trying to use it along with a newer web3 when it is needed in projects. Is is planned by the team ? Regards