-
Notifications
You must be signed in to change notification settings - Fork 5
Closed
Labels
securityImpacts securityImpacts security
Description
The Whiteflag API is using v2.0.0-alpha.1 of the web3.js Ethereum JavaScript API. Although this version provides the future API, it is not as well maintained as v1.x. As a result v2.0.0-alpha.1 of the package currently introduces a security vulnerability due to its dependency on the elliptic package. See https://npmjs.com/advisories/1547
Consider reverting to v1.x of the web3.js Ethereum JavaScript API.
Metadata
Metadata
Assignees
Labels
securityImpacts securityImpacts security