[Snyk] Fix for 1 vulnerabilities

[vutting4221]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/contract/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-WEB3UTILS-6229337	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: web3

The new version differs by 250 commits.

• 5b5bf87 changelog updates
• 45d55c3 version update
• 4358140 Release/4.0.1 rc.2 (Add more networks to etherscan fetcher (including linea) trufflesuite/truffle#6152)
• cdc2835 fix canary auth (Best way to check contracts coverage trufflesuite/truffle#6151)
• 55a4de1 add util polyfill (An error occurred while initializing the debugger.  trufflesuite/truffle#6150)
• 45edf3d Canary releases (Bump word-wrap from 1.2.3 to 1.2.4 trufflesuite/truffle#6143)
• 01ce365 Proposal for rearranging docs (Update sourcify networks for sourcify 2.4.0 trufflesuite/truffle#6141)
• 86082bc skip '### Breaking Changes' section from unreleasedSection array (Have debugger skip anything called from a generated source while stepping trufflesuite/truffle#6138)
• d60c285 Fix plugin example tests with `4.0.1-rc.1` (Update Ganache to 7.9.0 trufflesuite/truffle#6134)
• 88ac791 Correct and enhance documentation for subscribing to events (Still using node-ipc instead of the fork trufflesuite/truffle#6129)
• daaaff7 Autotype for contract methods (Add support for multicall3 to decoder interpretations trufflesuite/truffle#6137)
• ab80131 support ESM builds (Allow strings and bigints instead of numbers in decoder input fields trufflesuite/truffle#6131)
• 6202d1e min build whitelisting (replace google analytics with mixpanel trufflesuite/truffle#6132)
• 7a924db migration guide update (Add contractClass interpretation to address values trufflesuite/truffle#6130)
• 4f423fc Fix validation of nested tuples (deploy successfully in development network but failed with the ganache ui blockchain trufflesuite/truffle#6125)
• 408332d fix!: remove non read-only ens methods (Events not getting emitted in local blockchain but visible in Remix IDE trufflesuite/truffle#6084)
• 8c5ea34 Providers Tutorial (An error occurred in the command truffle dashboard when using vscode remote development trufflesuite/truffle#6095)
• f2abd6a Eth turorial (Remove cronos testnet from etherscan fetcher trufflesuite/truffle#6120)
• 210455a transaction integration tests (Dashboard notify user if no Frame account is / can be connected trufflesuite/truffle#6071)
• fe959a1 Contract options fix (handle case when a user uses @truffle/test without core trufflesuite/truffle#6118)
• bf1311f update docs so web is imported by default (Proposal to shrink the Dashboard connection button trufflesuite/truffle#6112)
• 3b95b5e fix estimateGas to accept hex data without 0x prefix (Update README.md trufflesuite/truffle#6103)
• 8c3a17b Add a tutorial for smart contract basic interaction (Add chains for Sourcify 2.2.3 trufflesuite/truffle#6089)
• edc7a84 `defaultTransactionTypeParser` Refactor (Update CONTRIBUTING.md trufflesuite/truffle#6102)

See the full diff

Package name: web3-eth-abi

The new version differs by 250 commits.

• 5b5bf87 changelog updates
• 45d55c3 version update
• 4358140 Release/4.0.1 rc.2 (Add more networks to etherscan fetcher (including linea) trufflesuite/truffle#6152)
• cdc2835 fix canary auth (Best way to check contracts coverage trufflesuite/truffle#6151)
• 55a4de1 add util polyfill (An error occurred while initializing the debugger.  trufflesuite/truffle#6150)
• 45edf3d Canary releases (Bump word-wrap from 1.2.3 to 1.2.4 trufflesuite/truffle#6143)
• 01ce365 Proposal for rearranging docs (Update sourcify networks for sourcify 2.4.0 trufflesuite/truffle#6141)
• 86082bc skip '### Breaking Changes' section from unreleasedSection array (Have debugger skip anything called from a generated source while stepping trufflesuite/truffle#6138)
• d60c285 Fix plugin example tests with `4.0.1-rc.1` (Update Ganache to 7.9.0 trufflesuite/truffle#6134)
• 88ac791 Correct and enhance documentation for subscribing to events (Still using node-ipc instead of the fork trufflesuite/truffle#6129)
• daaaff7 Autotype for contract methods (Add support for multicall3 to decoder interpretations trufflesuite/truffle#6137)
• ab80131 support ESM builds (Allow strings and bigints instead of numbers in decoder input fields trufflesuite/truffle#6131)
• 6202d1e min build whitelisting (replace google analytics with mixpanel trufflesuite/truffle#6132)
• 7a924db migration guide update (Add contractClass interpretation to address values trufflesuite/truffle#6130)
• 4f423fc Fix validation of nested tuples (deploy successfully in development network but failed with the ganache ui blockchain trufflesuite/truffle#6125)
• 408332d fix!: remove non read-only ens methods (Events not getting emitted in local blockchain but visible in Remix IDE trufflesuite/truffle#6084)
• 8c5ea34 Providers Tutorial (An error occurred in the command truffle dashboard when using vscode remote development trufflesuite/truffle#6095)
• f2abd6a Eth turorial (Remove cronos testnet from etherscan fetcher trufflesuite/truffle#6120)
• 210455a transaction integration tests (Dashboard notify user if no Frame account is / can be connected trufflesuite/truffle#6071)
• fe959a1 Contract options fix (handle case when a user uses @truffle/test without core trufflesuite/truffle#6118)
• bf1311f update docs so web is imported by default (Proposal to shrink the Dashboard connection button trufflesuite/truffle#6112)
• 3b95b5e fix estimateGas to accept hex data without 0x prefix (Update README.md trufflesuite/truffle#6103)
• 8c3a17b Add a tutorial for smart contract basic interaction (Add chains for Sourcify 2.2.3 trufflesuite/truffle#6089)
• edc7a84 `defaultTransactionTypeParser` Refactor (Update CONTRIBUTING.md trufflesuite/truffle#6102)

See the full diff

Package name: web3-utils

The new version differs by 250 commits.

• a7bbd7a changelog updates
• 9e5ac81 lerna version bumps
• cf60f71 Fix unstable tests [DRAFT] (#6857)
• edf3164 add eventemitter3 (#6823)
• 040d3a3 fix some typos (#6863)
• ca31f6a EIP6963 web3 provider update event (#6855)
• 8ed041c Research (#6841)
• bd6cc71 Fix bundle stats (#6846)
• 0e59f28 [docs] add stripHexPrefix method to migration guide (#6843)
• ab1b250 fix (#6842)
• b25b883 Update CONTRIBUTING.md (#6838)
• 35cb1b8 ens setAddress support (#6834)
• 86447cd 6201 multi provider (#6825)
• b4c92e1 docs: create resources page (#6824)
• cf4b93f Web3.js Adapter for Wagmi: Documenation (#6813)
• afece40 add link to JSON interface spec docs (#6832)
• 95807a6 fixed broken link in README to point to correct address (#6818)
• a2d9cb4 Completed hardhat/web3v4 tutorial (#6806)
• c5cecaf Enable users to provide feedback page (#6815)
• ec65468 feat: Implement eth.calculateFeeData (#6795)
• f696e47 fix link (#6810)
• e774646 feat: Add getMaxPriorityFeePerGas method (#6748)
• 9023511 Updated README.md (#6804)
• a0d4d2e Resolve test snapshot issue between node 18 vs 20 & 21 (#6794)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution