From 78660c20bed6505a9fe86f531fc8301537ab34de Mon Sep 17 00:00:00 2001 From: Rodrigo <39995243+RodriFS@users.noreply.github.com> Date: Tue, 27 Oct 2026 15:40:49 +0100 Subject: [PATCH] fix: update bitcoinjs-lib, bolt11 and tiny-secp256k1 to patch security advisories --- package-lock.json | 90 ++++++++++++++++++------------------- server-backend/package.json | 6 +-- shared/package.json | 4 +- swap-frontend/package.json | 6 +-- 4 files changed, 51 insertions(+), 55 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5fd49032..b4c1337b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -875,6 +875,7 @@ "os": [ "aix" ], + "peer": true, "engines": { "node": ">=18" } @@ -892,6 +893,7 @@ "os": [ "android" ], + "peer": true, "engines": { "node": ">=18" } @@ -909,6 +911,7 @@ "os": [ "android" ], + "peer": true, "engines": { "node": ">=18" } @@ -926,6 +929,7 @@ "os": [ "android" ], + "peer": true, "engines": { "node": ">=18" } @@ -943,6 +947,7 @@ "os": [ "darwin" ], + "peer": true, "engines": { "node": ">=18" } @@ -960,6 +965,7 @@ "os": [ "darwin" ], + "peer": true, "engines": { "node": ">=18" } @@ -977,6 +983,7 @@ "os": [ "freebsd" ], + "peer": true, "engines": { "node": ">=18" } @@ -994,6 +1001,7 @@ "os": [ "freebsd" ], + "peer": true, "engines": { "node": ">=18" } @@ -1011,6 +1019,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1028,6 +1037,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1045,6 +1055,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1062,6 +1073,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1079,6 +1091,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1096,6 +1109,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1113,6 +1127,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1130,6 +1145,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1147,6 +1163,7 @@ "os": [ "linux" ], + "peer": true, "engines": { "node": ">=18" } @@ -1164,6 +1181,7 @@ "os": [ "netbsd" ], + "peer": true, "engines": { "node": ">=18" } @@ -1181,6 +1199,7 @@ "os": [ "netbsd" ], + "peer": true, "engines": { "node": ">=18" } @@ -1198,6 +1217,7 @@ "os": [ "openbsd" ], + "peer": true, "engines": { "node": ">=18" } @@ -1215,6 +1235,7 @@ "os": [ "openbsd" ], + "peer": true, "engines": { "node": ">=18" } @@ -1232,6 +1253,7 @@ "os": [ "openharmony" ], + "peer": true, "engines": { "node": ">=18" } @@ -1249,6 +1271,7 @@ "os": [ "sunos" ], + "peer": true, "engines": { "node": ">=18" } @@ -1266,6 +1289,7 @@ "os": [ "win32" ], + "peer": true, "engines": { "node": ">=18" } @@ -1283,6 +1307,7 @@ "os": [ "win32" ], + "peer": true, "engines": { "node": ">=18" } @@ -1300,6 +1325,7 @@ "os": [ "win32" ], + "peer": true, "engines": { "node": ">=18" } @@ -1427,7 +1453,6 @@ "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.0.tgz", "integrity": "sha512-N8Jx6PaYzcTRNzirReJCtADVoq4z7+1KQ4E70jTg/koQiMoUSN1kbNjPOqpPbhMFhfU1/l7ixspPl8dNY+FoUg==", "license": "Apache-2.0", - "peer": true, "dependencies": { "@grpc/proto-loader": "^0.8.0", "@js-sdsl/ordered-map": "^4.4.2" @@ -1459,7 +1484,6 @@ "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.7.15.tgz", "integrity": "sha512-tMXdRCfYVixjuFK+Hk0Q1s38gV9zDiDJfWL3h1rv4Qc39oILCu1TRTDt7+fGUI8K4G1Fj125Hx/ru3azECWTyQ==", "license": "Apache-2.0", - "peer": true, "dependencies": { "lodash.camelcase": "^4.3.0", "long": "^5.0.0", @@ -2243,7 +2267,6 @@ "resolved": "https://registry.npmjs.org/@nestjs/common/-/common-10.4.20.tgz", "integrity": "sha512-hxJxZF7jcKGuUzM9EYbuES80Z/36piJbiqmPy86mk8qOn5gglFebBTvcx7PWVbRNSb4gngASYnefBj/Y2HAzpQ==", "license": "MIT", - "peer": true, "dependencies": { "file-type": "20.4.1", "iterare": "1.2.1", @@ -2290,7 +2313,6 @@ "integrity": "sha512-kRdtyKA3+Tu70N3RQ4JgmO1E3LzAMs/eppj7SfjabC7TgqNWoS4RLhWl4BqmsNVmjj6D5jgfPVtHtgYkU3AfpQ==", "hasInstallScript": true, "license": "MIT", - "peer": true, "dependencies": { "@nuxtjs/opencollective": "0.3.2", "fast-safe-stringify": "2.1.1", @@ -2361,7 +2383,6 @@ "resolved": "https://registry.npmjs.org/@nestjs/platform-express/-/platform-express-10.4.20.tgz", "integrity": "sha512-rh97mX3rimyf4xLMLHuTOBKe6UD8LOJ14VlJ1F/PTd6C6ZK9Ak6EHuJvdaGcSFQhd3ZMBh3I6CuujKGW9pNdIg==", "license": "MIT", - "peer": true, "dependencies": { "body-parser": "1.20.3", "cors": "2.8.5", @@ -2407,7 +2428,6 @@ "resolved": "https://registry.npmjs.org/@nestjs/swagger/-/swagger-8.1.1.tgz", "integrity": "sha512-5Mda7H1DKnhKtlsb0C7PYshcvILv8UFyUotHzxmWh0G65Z21R3LZH/J8wmpnlzL4bmXIfr42YwbEwRxgzpJ5sQ==", "license": "MIT", - "peer": true, "dependencies": { "@microsoft/tsdoc": "^0.15.0", "@nestjs/mapped-types": "2.0.6", @@ -2523,7 +2543,6 @@ "resolved": "https://registry.npmjs.org/@nestjs/typeorm/-/typeorm-10.0.2.tgz", "integrity": "sha512-H738bJyydK4SQkRCTeh1aFBxoO1E9xdL/HaLGThwrqN95os5mEyAtK7BLADOS+vldP4jDZ2VQPLj4epWwRqCeQ==", "license": "MIT", - "peer": true, "dependencies": { "uuid": "9.0.1" }, @@ -2978,7 +2997,6 @@ "resolved": "https://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz", "integrity": "sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A==", "license": "MIT", - "peer": true, "funding": { "type": "opencollective", "url": "https://opencollective.com/popperjs" @@ -4022,7 +4040,6 @@ "resolved": "https://registry.npmjs.org/@types/node/-/node-22.18.12.tgz", "integrity": "sha512-BICHQ67iqxQGFSzfCFTT7MRQ5XcBjG5aeKh5Ok38UBbPe5fxTyE+aHFxwVrGyr8GNlqFMLKD1D3P2K/1ks8tog==", "license": "MIT", - "peer": true, "dependencies": { "undici-types": "~6.21.0" } @@ -4184,7 +4201,6 @@ "integrity": "sha512-4Z+L8I2OqhZV8qA132M4wNL30ypZGYOQVBfMgxDH/K5UX0PNqTu1c6za9ST5r9+tavvHiTWmBnKzpCJ/GlVFtg==", "dev": true, "license": "BSD-2-Clause", - "peer": true, "dependencies": { "@typescript-eslint/scope-manager": "7.18.0", "@typescript-eslint/types": "7.18.0", @@ -4563,7 +4579,6 @@ "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz", "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==", "license": "MIT", - "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -4599,7 +4614,6 @@ "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "fast-deep-equal": "^3.1.1", "fast-json-stable-stringify": "^2.0.0", @@ -5411,9 +5425,9 @@ } }, "node_modules/bitcoinjs-lib": { - "version": "6.1.6", - "resolved": "https://registry.npmjs.org/bitcoinjs-lib/-/bitcoinjs-lib-6.1.6.tgz", - "integrity": "sha512-Fk8+Vc+e2rMoDU5gXkW9tD+313rhkm5h6N9HfZxXvYU9LedttVvmXKTgd9k5rsQJjkSfsv6XRM8uhJv94SrvcA==", + "version": "6.1.10", + "resolved": "https://registry.npmjs.org/bitcoinjs-lib/-/bitcoinjs-lib-6.1.10.tgz", + "integrity": "sha512-9KpnS5JKVP0j0yfTsBNFIsNA6+JdBDb7VtL35F20I/pJYobosi3TmZFGtu6qxhJCfb0vubJixr5Zv61/lUYETw==", "license": "MIT", "dependencies": { "@noble/hashes": "^1.2.0", @@ -5556,9 +5570,9 @@ "license": "MIT" }, "node_modules/bolt11": { - "version": "1.4.1", - "resolved": "https://registry.npmjs.org/bolt11/-/bolt11-1.4.1.tgz", - "integrity": "sha512-jR0Y+MO+CK2at1Cg5mltLJ+6tdOwNKoTS/DJOBDdzVkQ+R9D6UgZMayTWOsuzY7OgV1gEqlyT5Tzk6t6r4XcNQ==", + "version": "1.4.2", + "resolved": "https://registry.npmjs.org/bolt11/-/bolt11-1.4.2.tgz", + "integrity": "sha512-4gEcU3GpRJgHKnO5g4vdo7RCJkvnBbslCACFwmQmt1Hb9pfi5uLezGdjIYJmXs1YUM3gG1x3znL2dXVXIr1hdQ==", "license": "MIT", "dependencies": { "@types/bn.js": "^4.11.3", @@ -5776,7 +5790,6 @@ } ], "license": "MIT", - "peer": true, "dependencies": { "baseline-browser-mapping": "^2.8.19", "caniuse-lite": "^1.0.30001751", @@ -7404,7 +7417,6 @@ "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.6.1", @@ -7461,7 +7473,6 @@ "integrity": "sha512-iI1f+D2ViGn+uvv5HuHVUamg8ll4tN+JRHGc6IJi4TP9Kl976C57fzPXgseXNs8v0iA8aSJpHsTWjDb9QJamGQ==", "dev": true, "license": "MIT", - "peer": true, "bin": { "eslint-config-prettier": "bin/cli.js" }, @@ -9294,7 +9305,6 @@ "integrity": "sha512-NIy3oAFp9shda19hy4HK0HRTWKtPJmGdnvywu01nOqNC2vZg+Z+fvJDxpMQA88eb2I9EcafcdjYgsDthnYTvGw==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@jest/core": "^29.7.0", "@jest/types": "^29.6.3", @@ -10852,7 +10862,6 @@ "integrity": "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "deep-is": "^0.1.3", "fast-levenshtein": "^2.0.6", @@ -11136,7 +11145,6 @@ "resolved": "https://registry.npmjs.org/pg/-/pg-8.16.3.tgz", "integrity": "sha512-enxc1h0jA/aq5oSDMvqyW3q89ra6XIIDZgCX9vkMrnz5DFTw/Ny3Li2lFQ+pt3L6MCgm/5o2o8HW9hiJji+xvw==", "license": "MIT", - "peer": true, "dependencies": { "pg-connection-string": "^2.9.1", "pg-pool": "^3.10.1", @@ -11421,7 +11429,6 @@ "integrity": "sha512-I7AIg5boAr5R0FFtJ6rCfD+LFsWHp81dolrFD8S79U9tb8Az2nGrJncnMSnys+bpQJfRUzqs9hnA81OAA3hCuQ==", "dev": true, "license": "MIT", - "peer": true, "bin": { "prettier": "bin/prettier.cjs" }, @@ -11992,7 +11999,6 @@ "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.52.5.tgz", "integrity": "sha512-3GuObel8h7Kqdjt0gxkEzaifHTqLVW56Y/bjN7PSQtkKr0w3V/QYSdt6QWYtd7A1xUtYQigtdUfgj1RvWVtorw==", "license": "MIT", - "peer": true, "dependencies": { "@types/estree": "1.0.8" }, @@ -12125,7 +12131,6 @@ "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz", "integrity": "sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==", "license": "Apache-2.0", - "peer": true, "dependencies": { "tslib": "^2.1.0" } @@ -12341,7 +12346,6 @@ "resolved": "https://registry.npmjs.org/seroval/-/seroval-1.3.2.tgz", "integrity": "sha512-RbcPH1n5cfwKrru7v7+zrZvjLurgHhGyso3HTyGtRivGWgYjbOmGuivCQaORNELjNONoK35nj28EoWul9sb1zQ==", "license": "MIT", - "peer": true, "engines": { "node": ">=10" } @@ -12629,7 +12633,6 @@ "resolved": "https://registry.npmjs.org/solid-js/-/solid-js-1.9.10.tgz", "integrity": "sha512-Coz956cos/EPDlhs6+jsdTxKuJDPT7B5SVIWgABwROyxjY7Xbr8wkzD68Et+NxnV7DLJ3nJdAC2r9InuV/4Jew==", "license": "MIT", - "peer": true, "dependencies": { "csstype": "^3.1.0", "seroval": "~1.3.0", @@ -13204,7 +13207,6 @@ "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", @@ -13433,9 +13435,9 @@ "license": "MIT" }, "node_modules/tiny-secp256k1": { - "version": "2.2.4", - "resolved": "https://registry.npmjs.org/tiny-secp256k1/-/tiny-secp256k1-2.2.4.tgz", - "integrity": "sha512-FoDTcToPqZE454Q04hH9o2EhxWsm7pOSpicyHkgTwKhdKWdsTUuqfP5MLq3g+VjAtl2vSx6JpXGdwA2qpYkI0Q==", + "version": "2.2.5", + "resolved": "https://registry.npmjs.org/tiny-secp256k1/-/tiny-secp256k1-2.2.5.tgz", + "integrity": "sha512-SayewBxdprZxU7VSugGb/LZsU3zOEtZnT7aCqSEIRtXRO4jpxS5IyWmvGEWVxCdaO8SSyB0OHf1B/VtC3szytg==", "license": "MIT", "dependencies": { "uint8array-tools": "0.0.7" @@ -13642,7 +13644,6 @@ "resolved": "https://registry.npmjs.org/ts-node/-/ts-node-10.9.2.tgz", "integrity": "sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ==", "license": "MIT", - "peer": true, "dependencies": { "@cspotcode/source-map-support": "^0.8.0", "@tsconfig/node10": "^1.0.7", @@ -13821,7 +13822,6 @@ "resolved": "https://registry.npmjs.org/typeorm/-/typeorm-0.3.27.tgz", "integrity": "sha512-pNV1bn+1n8qEe8tUNsNdD8ejuPcMAg47u2lUGnbsajiNUr3p2Js1XLKQjBMH0yMRMDfdX8T+fIRejFmIwy9x4A==", "license": "MIT", - "peer": true, "dependencies": { "@sqltools/formatter": "^1.2.5", "ansis": "^3.17.0", @@ -13969,7 +13969,6 @@ "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz", "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==", "license": "Apache-2.0", - "peer": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" @@ -14225,7 +14224,6 @@ "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.21.tgz", "integrity": "sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==", "license": "MIT", - "peer": true, "dependencies": { "esbuild": "^0.21.3", "postcss": "^8.4.43", @@ -15020,7 +15018,6 @@ "integrity": "sha512-EksG6gFY3L1eFMROS/7Wzgrii5mBAFe4rIr3r2BTfo7bcc+DWwFZ4OJ/miOuHJO/A85HwyI4eQ0F6IKXesO7Fg==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@types/eslint-scope": "^3.7.7", "@types/estree": "^1.0.6", @@ -15404,7 +15401,6 @@ "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz", "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==", "license": "MIT", - "peer": true, "funding": { "url": "https://github.com/sponsors/colinhacks" } @@ -15427,8 +15423,8 @@ "@scure/bip32": "^1.6.2", "@vulpemventures/secp256k1-zkp": "^3.2.1", "bip32": "^5.0.0-rc.0", - "bitcoinjs-lib": "6.1.6", - "bolt11": "^1.4.1", + "bitcoinjs-lib": "6.1.10", + "bolt11": "^1.4.2", "commander": "^14.0.0", "decimal.js": "^10.4.3", "ecpair": "2.1.0", @@ -15439,7 +15435,7 @@ "pg": "^8.12.0", "prom-client": "^15.1.3", "slip77": "^0.2.0", - "tiny-secp256k1": "^2.2.3", + "tiny-secp256k1": "^2.2.5", "ts-node": "^10.9.2", "typeorm": "^0.3.20", "zod": "^3.23.8" @@ -15461,10 +15457,10 @@ "name": "@40swap/shared", "dependencies": { "@vulpemventures/secp256k1-zkp": "^3.2.1", - "bitcoinjs-lib": "6.1.6", + "bitcoinjs-lib": "6.1.10", "decimal.js": "^10.4.3", "liquidjs-lib": "^6.0.2-liquid.37", - "tiny-secp256k1": "^2.2.3", + "tiny-secp256k1": "^2.2.5", "zod": "^3.23.8" }, "devDependencies": { @@ -15482,8 +15478,8 @@ "@solid-primitives/timer": "^1.3.10", "@solidjs/router": "^0.14.5", "bip32": "^5.0.0-rc.0", - "bitcoinjs-lib": "^6.1.5", - "bolt11": "^1.4.1", + "bitcoinjs-lib": "^6.1.10", + "bolt11": "^1.4.2", "bootstrap": "^5.3.3", "buffer": "^6.0.3", "decimal.js": "^10.4.3", @@ -15496,7 +15492,7 @@ "solid-fa": "^0.2.0", "solid-js": "^1.8.23", "solid-toast": "^0.5.0", - "tiny-secp256k1": "^2.2.3", + "tiny-secp256k1": "^2.2.5", "vite-plugin-mkcert": "^1.17.6", "zod": "^3.23.8" }, diff --git a/server-backend/package.json b/server-backend/package.json index 5897980b..39f96009 100644 --- a/server-backend/package.json +++ b/server-backend/package.json @@ -35,8 +35,8 @@ "@scure/bip32": "^1.6.2", "@vulpemventures/secp256k1-zkp": "^3.2.1", "bip32": "^5.0.0-rc.0", - "bitcoinjs-lib": "6.1.6", - "bolt11": "^1.4.1", + "bitcoinjs-lib": "6.1.10", + "bolt11": "^1.4.2", "commander": "^14.0.0", "decimal.js": "^10.4.3", "ecpair": "2.1.0", @@ -47,7 +47,7 @@ "pg": "^8.12.0", "prom-client": "^15.1.3", "slip77": "^0.2.0", - "tiny-secp256k1": "^2.2.3", + "tiny-secp256k1": "^2.2.5", "ts-node": "^10.9.2", "typeorm": "^0.3.20", "zod": "^3.23.8" diff --git a/shared/package.json b/shared/package.json index 0d93ff69..b7396b81 100644 --- a/shared/package.json +++ b/shared/package.json @@ -11,10 +11,10 @@ "test": "echo \"Error: no test specified\" && exit 1" }, "dependencies": { - "bitcoinjs-lib": "6.1.6", + "bitcoinjs-lib": "6.1.10", "decimal.js": "^10.4.3", "liquidjs-lib": "^6.0.2-liquid.37", - "tiny-secp256k1": "^2.2.3", + "tiny-secp256k1": "^2.2.5", "@vulpemventures/secp256k1-zkp": "^3.2.1", "zod": "^3.23.8" }, diff --git a/swap-frontend/package.json b/swap-frontend/package.json index edcf0253..a7361c19 100644 --- a/swap-frontend/package.json +++ b/swap-frontend/package.json @@ -15,8 +15,8 @@ "@solid-primitives/timer": "^1.3.10", "@solidjs/router": "^0.14.5", "bip32": "^5.0.0-rc.0", - "bitcoinjs-lib": "^6.1.5", - "bolt11": "^1.4.1", + "bitcoinjs-lib": "^6.1.10", + "bolt11": "^1.4.2", "bootstrap": "^5.3.3", "buffer": "^6.0.3", "decimal.js": "^10.4.3", @@ -29,7 +29,7 @@ "solid-fa": "^0.2.0", "solid-js": "^1.8.23", "solid-toast": "^0.5.0", - "tiny-secp256k1": "^2.2.3", + "tiny-secp256k1": "^2.2.5", "vite-plugin-mkcert": "^1.17.6", "zod": "^3.23.8" },