fix: update protobufjs to fix critical vulnerability

Addresses CVE-2023-36665
BitGo · Apr 15, 2024 · 49cdde1 · 49cdde1
1 parent 23869a7
commit 49cdde1
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/modules/sdk-coin-hbar/package.json b/modules/sdk-coin-hbar/package.json
@@ -44,12 +44,12 @@
     "@bitgo/sdk-core": "^26.7.0",
     "@bitgo/statics": "^48.6.0",
     "@hashgraph/proto": "2.12.0",
-    "@hashgraph/sdk": "2.29.0",
+    "@hashgraph/sdk": "2.44.0",
     "@stablelib/sha384": "^1.0.0",
     "bignumber.js": "^9.0.0",
     "lodash": "^4.17.15",
     "long": "^4.0.0",
-    "protobufjs": "7.2.4",
+    "protobufjs": "7.2.5",
     "stellar-sdk": "^10.0.1",
     "tweetnacl": "^1.0.3"
   },

diff --git a/modules/sdk-coin-islm/package.json b/modules/sdk-coin-islm/package.json
@@ -51,7 +51,7 @@
     "cosmjs-types": "^0.6.1",
     "ethers": "^5.7.2",
     "keccak": "3.0.3",
-    "protobufjs": "^7.2.4"
+    "protobufjs": "^7.2.5"
   },
   "devDependencies": {
     "@bitgo/sdk-api": "^1.45.0",

diff --git a/modules/sdk-coin-trx/package.json b/modules/sdk-coin-trx/package.json
@@ -53,7 +53,7 @@
     "bignumber.js": "^9.0.0",
     "ethers": "^5.7.2",
     "lodash": "^4.17.14",
-    "protobufjs": "7.2.4",
+    "protobufjs": "7.2.5",
     "secp256k1": "5.0.0",
     "superagent": "^3.8.3",
     "tronweb": "5.1.0"