Skip to content

Commit

Permalink
Update Ethers.js from 5.0.30 to 5.3.0
Browse files Browse the repository at this point in the history
ethers.js before 5.3.0 is using ws 7.2.3. This version of ws is vulnerable to Regular Expression Denial of Service (ReDoS). A specially crafted value of the Sec-Websocket-Protocol header can be used to significantly slow down a ws server. ethers.js 5.3.0 has been updated to use a version of ws that is not vulnerable to this.

ethers-io/ethers.js#1634
websockets/ws@00c425e
  • Loading branch information
fredriksvantes committed Jun 1, 2021
1 parent e9ca628 commit 84b9368
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -32,7 +32,7 @@
"@types/file-saver": "^2.0.1",
"ansi_up": "^5.0.0",
"echarts": "^4.9.0",
"ethers": "^5.0.30",
"ethers": "^5.3.0",
"file-saver": "^2.0.5",
"jszip": "^3.6.0",
"leaflet": "^1.7.1",
Expand Down

0 comments on commit 84b9368

Please sign in to comment.