hyperledger-labs/weaver-dlt-interoperability

Vulnerability with jsrsasign

Closed this issue · 0 comments

Multiple vulnerabilities reported with jsrsasign package-
CVE-2021-30246 │ CRITICAL │ 8.0.24
CVE-2022-25898 │ HIGH
GHSA-h87q-g2wp-47pj │ MEDIUM

Recommended fix is to upgrade to 10.5.25