fix(security): address CVE-2022-3517 - minimatch < 3.0.5 ReDoS vuln

Updated mocha to newer versions which do not depend on the old minimatch Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
hyperledger · Aug 29, 2024 · e97e27b · e97e27b
1 parent 6872ec5
commit e97e27b
Show file tree

Hide file tree

Showing 7 changed files with 103 additions and 112 deletions.
diff --git a/weaver/core/identity-management/iin-agent/package-local.json b/weaver/core/identity-management/iin-agent/package-local.json
@@ -35,7 +35,7 @@
     "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
     "jsrsasign": "11.0.0",
-    "mocha": "5.2.0",
+    "mocha": "10.7.3",
     "nodemon": "2.0.22",
     "nyc": "12.0.2",
     "proto3-json-serializer": "1.1.1",

diff --git a/weaver/core/identity-management/iin-agent/package.json b/weaver/core/identity-management/iin-agent/package.json
@@ -35,7 +35,7 @@
     "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
     "jsrsasign": "11.0.0",
-    "mocha": "5.2.0",
+    "mocha": "10.7.3",
     "nodemon": "2.0.22",
     "nyc": "12.0.2",
     "proto3-json-serializer": "1.1.1",

diff --git a/weaver/sdks/besu/node/package-local.json b/weaver/sdks/besu/node/package-local.json
@@ -23,7 +23,7 @@
     "@types/node": "18.11.9",
     "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
-    "mocha": "5.2.0",
+    "mocha": "10.7.3",
     "nyc": "12.0.2",
     "rewire": "4.0.1",
     "sinon": "6.3.5",

diff --git a/weaver/sdks/besu/node/package.json b/weaver/sdks/besu/node/package.json
@@ -23,7 +23,7 @@
     "@types/node": "18.11.9",
     "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
-    "mocha": "5.2.0",
+    "mocha": "10.7.3",
     "nyc": "12.0.2",
     "rewire": "4.0.1",
     "sinon": "6.3.5",

diff --git a/weaver/sdks/fabric/interoperation-node-sdk/package-local.json b/weaver/sdks/fabric/interoperation-node-sdk/package-local.json
@@ -56,7 +56,7 @@
     "@types/node": "18.11.9",
     "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
-    "mocha": "5.2.0",
+    "mocha": "10.7.3",
     "nyc": "12.0.2",
     "rewire": "4.0.1",
     "sinon": "6.3.5",

diff --git a/weaver/sdks/fabric/interoperation-node-sdk/package.json b/weaver/sdks/fabric/interoperation-node-sdk/package.json
@@ -56,7 +56,7 @@
     "@types/node": "18.11.9",
     "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
-    "mocha": "5.2.0",
+    "mocha": "10.7.3",
     "nyc": "12.0.2",
     "rewire": "4.0.1",
     "sinon": "6.3.5",