[Snyk] Upgrade @certusone/wormhole-sdk from 0.1.6 to 0.10.1 #121

snyk-bot · 2023-06-12T02:18:22Z

Snyk has created this PR to upgrade @certusone/wormhole-sdk from 0.1.6 to 0.10.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 67 versions ahead of your current version.
The recommended version was released 5 months ago, on 2023-01-24.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-PROTOBUFJS-2441248	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @certusone/wormhole-sdk

0.10.1 - 2023-01-24
0.10.0 - 2023-01-24
0.9.18 - 2023-05-24
0.9.18-beta.1 - 2023-05-22
0.9.18-beta.0 - 2023-05-20
0.9.17 - 2023-05-17
0.9.17-beta.0 - 2023-05-17
0.9.16 - 2023-05-03
0.9.15 - 2023-05-02
0.9.15-beta.4 - 2023-05-01
0.9.15-beta.3 - 2023-04-30
0.9.15-beta.2 - 2023-04-29
0.9.15-beta.1 - 2023-04-29
0.9.15-beta.0 - 2023-04-27
0.9.14 - 2023-04-18
0.9.13 - 2023-04-18
0.9.12 - 2023-04-04
0.9.11 - 2023-02-23
0.9.10 - 2023-02-13
0.9.9 - 2023-01-11
0.9.8 - 2022-12-22
0.9.7 - 2022-12-21
0.9.6 - 2022-12-14
0.9.5 - 2022-12-07
0.9.4 - 2022-12-01
0.9.3 - 2022-11-22
0.9.2 - 2022-11-11
0.9.1 - 2022-11-09
0.9.0 - 2022-11-01
0.8.0 - 2022-10-24
0.7.6 - 2022-10-18
0.7.5 - 2022-10-16
0.7.4 - 2022-10-16
0.7.3 - 2022-10-15
0.7.2 - 2022-10-12
0.7.1 - 2022-10-07
0.7.0 - 2022-09-28
0.6.5 - 2022-09-21
0.6.4 - 2022-09-21
0.6.3 - 2022-09-21
0.6.2 - 2022-08-17
0.6.1 - 2022-08-10
0.6.0 - 2022-08-01
0.5.0 - 2022-07-13
0.4.5 - 2022-06-24
0.4.4 - 2022-06-22
0.4.3 - 2022-06-17
0.4.2 - 2022-06-16
0.4.1 - 2022-06-09
0.4.0 - 2022-06-09
0.3.8 - 2022-06-09
0.3.7 - 2022-06-03
0.3.6 - 2022-05-31
0.3.5 - 2022-05-24
0.3.4 - 2022-05-20
0.3.3 - 2022-05-16
0.3.2 - 2022-05-11
0.3.1 - 2022-05-10
0.3.0 - 2022-05-05
0.2.7 - 2022-05-02
0.2.6 - 2022-04-29
0.2.5 - 2022-04-22
0.2.4 - 2022-04-04
0.2.3 - 2022-03-25
0.2.2 - 2022-03-23
0.2.1 - 2022-03-05
0.2.0 - 2022-02-10
0.1.6 - 2022-01-07

from @certusone/wormhole-sdk GitHub release notes

Commit messages

Package name: @certusone/wormhole-sdk

05fb1bd Merge branch 'main' into chore/inj-package-bump-and-msg-execute-contract-update
3ec709d chore: packages bump
59602e7 aptos/cache_fix: remove the usage of the cache from the aptos test that runs in the Dockerfile
9db82e3 cosmwasm - separate deploy code per chain
f258da9 Update bounty
588d7e6 node: ether block pollers need to wrap their supervisor runs
ff7273c tilt: two wormchain nodes for devnet (wormchain - two nodes for devnet wormhole-foundation/wormhole#2228)
3580f51 node/pythnet: websocket subscription (node/pythnet: websocket subscription wormhole-foundation/wormhole#2219)
e6d3bb8 worm: speed up `evm info` by improving concurrency
a797613 tilt: add ibc relayer which connects wormchain and terra2 to dev environment (tilt: add ibc relayer which connects wormchain and terra2 to dev envi… wormhole-foundation/wormhole#2215)
0783143 wormchain: run Ignite through docker and update documentation (wormchain: run Ignite through docker and update documentation wormhole-foundation/wormhole#2169)
421a030 sdk/rust: Remove `*_with_payload` methods
3c6702b sdk/rust: Add serde_wormhole::RawMessage
8f08d68 wormchain: reset genesis to adjust 0 commission change values
0a7f0da node: New default current guardian set index (3)
004ccec clients/js: handle injective mainnet
09aee3c Node/Acct: Renaming (Node/Acct: Renaming wormhole-foundation/wormhole#2245)
499c842 Node: Initial guardiand changes for accounting (Node: Initial guardiand changes for accounting wormhole-foundation/wormhole#2181)
8777c22 cosmwasm: accounting: Use cw_transcode for events
5c41d34 node: add logging for public rpc requests
3f61661 sdk: Add Aptos NFT bridge address (SDK: Add Aptos NFT bridge address wormhole-foundation/wormhole#2244)
3de4f87 node/cosmwasm: restructure a little
b1050f6 cosmwasm: accounting: Simply transfer queries
1178f6e node/ether: scissors updates