HIGH Snyk severity in dependency, update elliptic to 6.6.1

[aumetov]

Improper Verification of Cryptographic Signature has High security severity score in snyk reports 8.7
Affecting elliptic package, versions <6.6.0

https://security.snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303
Need to upgrade elliptic package to latest version 6.6.1

[manpreet-compro]

Yes, flagged by AWS inspector also in my case
Elliptic has fixed this - indutny/elliptic#325

Could we upgrade the package and release new version

[omsmith]

jwk-to-pem's constraint on elliptic already matched the updated version.

However, I've release 2.0.7 should that help your teams with your scanners.

Consider moving your usage away from jwk-to-pem to modern Node.js features: #187 (comment)