Skip to content

Commit 50dfa6d

Browse files
Address false positive for CVE-2024-21484 (#186)
This vulnerability only relates to the Node implementation and impacts RSA encryption, which is not used by Fabric. Update to development versions of fabric-sdk-node packages where dependencies have been updated only to avoid vulnerability scan failures. Signed-off-by: Mark S. Lewis <[email protected]>
1 parent b434867 commit 50dfa6d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

node/admin/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,8 @@
1414
"test": "mocha test"
1515
},
1616
"dependencies": {
17-
"fabric-ca-client": "latest",
18-
"fabric-common": "latest",
17+
"fabric-ca-client": "unstable",
18+
"fabric-common": "unstable",
1919
"@hyperledger-twgc/fabric-formatter": "file:../formatter",
2020
"form-data": "latest",
2121
"@davidkhala/crypto": "latest"

0 commit comments

Comments
 (0)