From edbb305969cdd6405a59aaefaef03bde86cff5fc Mon Sep 17 00:00:00 2001 From: Stefan Seide Date: Sun, 18 Aug 2024 17:55:16 +0200 Subject: [PATCH] update elliptic@6.5.7 and @cyclonedx/cyclonedx-npm"@1.19.3 Signed-off-by: Stefan Seide --- CHANGELOG.md | 5 ++++- package-lock.json | 51 +++++++++++++++++++++--------------------- package.json | 2 +- sbom.json | 56 +++++++++++++++++++++++------------------------ 4 files changed, 59 insertions(+), 55 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index a65f7469..8990712b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,8 @@ * partial update of semver to 7.5.3 (fix CVE-2022-2588) * update @babel/traverse from 7.22.5 to 7.23.3 (fix CVE-2023-45133) * update browserify-sign from 4.2.1 to 4.2.2 (fix CVE-2023-46234) +* update elliptic from 6.5.4 to 6.5.7 (fix CVE-2024-42459, CVE-2024-42460, CVE-2024-42461) + #### Enhancements * allow using IPv6 addresses for Redis connection definitions. (except REDIS_HOSTS env var, here no IPv6 allowed, use host names instead) * allow setting a custom HTTP header name used for the JWT session authentication token @@ -19,8 +21,9 @@ * update helm chart autoscaling apis for newer K8s versions, #520 * update helm chart to allow setting ingressClassName for newer K8s versions, #494 * update UI for better visibility on how to close redis commands modal, #456 -* update ioredis from 4.28.5 to 5.3.2 +* update ioredis from 4.28.5 to 5.4.1 * update dependencies yargs@17.7.2, ejs@3.1.9, jstree@3.3.15, config@3.3.9, body-parser@1.20.2 +* update @cyclonedx/cyclonedx-npm"@1.19.3 ## Version 0.8.1 #### Bugfixes diff --git a/package-lock.json b/package-lock.json index 843d848b..cb4e7aa6 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "redis-commander", - "version": "0.9.0-rc4", + "version": "0.9.0-rc5", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "redis-commander", - "version": "0.9.0-rc4", + "version": "0.9.0-rc5", "hasInstallScript": true, "license": "MIT", "dependencies": { @@ -21,7 +21,7 @@ "express": "4.19.2", "express-partials": "0.3.0", "inflection": "1.13.4", - "ioredis": "^5.4.1", + "ioredis": "5.4.1", "jquery.json-viewer": "1.5.0", "jsonwebtoken": "9.0.2", "jstree": "3.3.16", @@ -543,9 +543,9 @@ } }, "node_modules/@cyclonedx/cyclonedx-library": { - "version": "6.10.0", - "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-library/-/cyclonedx-library-6.10.0.tgz", - "integrity": "sha512-GTFDMbmQP6P2MyoGU32LdZBdtXC6EMzcfzDbbjMoWoi7OBJzPM3L/ZkR7FMuAYyz7jOR/7cc9NVyWN90fa0NLQ==", + "version": "6.11.0", + "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-library/-/cyclonedx-library-6.11.0.tgz", + "integrity": "sha512-T2R49+ia3NmluV+56Ev1NSIjG7DKUFM3EzzhHwJqWRUMuFK3Z8AIKIbNezAxoyl+4kJ6MzT8lke7t8mkZom+/A==", "dev": true, "funding": [ { @@ -553,6 +553,7 @@ "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" } ], + "license": "Apache-2.0", "optional": true, "dependencies": { "packageurl-js": ">=0.0.6 <0.0.8 || ^1", @@ -570,9 +571,9 @@ } }, "node_modules/@cyclonedx/cyclonedx-npm": { - "version": "1.19.0", - "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-1.19.0.tgz", - "integrity": "sha512-N7MQKOX0SluwCHfmlbsWXYWB7BuJ9yD9feIbWWabBKTe87mrNNqPlRQsb1tTR9QTLEf5AsycFVbg1luAofSE/g==", + "version": "1.19.3", + "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-1.19.3.tgz", + "integrity": "sha512-fFElJGIjym2jX6d3bR5aXXkY0RaIcysuxh7qMCEzFKabV2JDpMcvTNJFKD9aTu6sJpD2m1o2VsrUG2Sx9mJM1A==", "dev": true, "funding": [ { @@ -580,11 +581,11 @@ "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" } ], + "license": "Apache-2.0", "optional": true, "dependencies": { - "@cyclonedx/cyclonedx-library": "^6.6.0", + "@cyclonedx/cyclonedx-library": "^6.11.0", "commander": "^10.0.0", - "hosted-git-info": "^4||^5||^6||^7", "normalize-package-data": "^3||^4||^5||^6", "packageurl-js": "^1.2.1", "xmlbuilder2": "^3.0.2" @@ -2314,10 +2315,11 @@ "dev": true }, "node_modules/elliptic": { - "version": "6.5.4", - "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.4.tgz", - "integrity": "sha512-iLhC6ULemrljPZb+QutR5TQGB+pdW6KGD5RSegS+8sorOZT+rdQFbsQFJgvN3eRqNALqJer4oQ16YvJHlU8hzQ==", + "version": "6.5.7", + "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.7.tgz", + "integrity": "sha512-ESVCtTwiA+XhY3wyh24QqRGBoP3rEdDUl3EDUUo9tft074fi19IrdpH7hLCMMP3CIj7jb3W96rn8lt/BqIlt5Q==", "dev": true, + "license": "MIT", "dependencies": { "bn.js": "^4.11.9", "brorand": "^1.1.0", @@ -6860,9 +6862,9 @@ } }, "@cyclonedx/cyclonedx-library": { - "version": "6.10.0", - "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-library/-/cyclonedx-library-6.10.0.tgz", - "integrity": "sha512-GTFDMbmQP6P2MyoGU32LdZBdtXC6EMzcfzDbbjMoWoi7OBJzPM3L/ZkR7FMuAYyz7jOR/7cc9NVyWN90fa0NLQ==", + "version": "6.11.0", + "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-library/-/cyclonedx-library-6.11.0.tgz", + "integrity": "sha512-T2R49+ia3NmluV+56Ev1NSIjG7DKUFM3EzzhHwJqWRUMuFK3Z8AIKIbNezAxoyl+4kJ6MzT8lke7t8mkZom+/A==", "dev": true, "optional": true, "requires": { @@ -6876,15 +6878,14 @@ } }, "@cyclonedx/cyclonedx-npm": { - "version": "1.19.0", - "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-1.19.0.tgz", - "integrity": "sha512-N7MQKOX0SluwCHfmlbsWXYWB7BuJ9yD9feIbWWabBKTe87mrNNqPlRQsb1tTR9QTLEf5AsycFVbg1luAofSE/g==", + "version": "1.19.3", + "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-1.19.3.tgz", + "integrity": "sha512-fFElJGIjym2jX6d3bR5aXXkY0RaIcysuxh7qMCEzFKabV2JDpMcvTNJFKD9aTu6sJpD2m1o2VsrUG2Sx9mJM1A==", "dev": true, "optional": true, "requires": { - "@cyclonedx/cyclonedx-library": "^6.6.0", + "@cyclonedx/cyclonedx-library": "^6.11.0", "commander": "^10.0.0", - "hosted-git-info": "^4||^5||^6||^7", "normalize-package-data": "^3||^4||^5||^6", "packageurl-js": "^1.2.1", "xmlbuilder2": "^3.0.2" @@ -8236,9 +8237,9 @@ "dev": true }, "elliptic": { - "version": "6.5.4", - "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.4.tgz", - "integrity": "sha512-iLhC6ULemrljPZb+QutR5TQGB+pdW6KGD5RSegS+8sorOZT+rdQFbsQFJgvN3eRqNALqJer4oQ16YvJHlU8hzQ==", + "version": "6.5.7", + "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.7.tgz", + "integrity": "sha512-ESVCtTwiA+XhY3wyh24QqRGBoP3rEdDUl3EDUUo9tft074fi19IrdpH7hLCMMP3CIj7jb3W96rn8lt/BqIlt5Q==", "dev": true, "requires": { "bn.js": "^4.11.9", diff --git a/package.json b/package.json index 605a6561..c87e68fb 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,7 @@ "Stefan Seide