Skip to content

A CVE was reported for fabric-gateway version 1.5.1 due to a vulnerability in the elliptic library. As a result, I upgraded fabric-gateway to the latest version.#183

Merged
bestbeforetoday merged 2 commits into
hyperledger:mainfrom
MuthuSundaravadivel:cve-2025-14505
Feb 23, 2026
Merged

A CVE was reported for fabric-gateway version 1.5.1 due to a vulnerability in the elliptic library. As a result, I upgraded fabric-gateway to the latest version.#183
bestbeforetoday merged 2 commits into
hyperledger:mainfrom
MuthuSundaravadivel:cve-2025-14505

Conversation

@MuthuSundaravadivel

Copy link
Copy Markdown
Member

A CVE was reported for fabric-gateway version 1.5.1 due to a vulnerability in the elliptic library. As a result, I upgraded fabric-gateway to the latest version.

indutny/elliptic#345

…oved fabric-gateway to the latest

Signed-off-by: Muthu  Sundaravadivel <muthu@dhcp-9-90-36-36.n3i-in.ibm.com>
@MuthuSundaravadivel MuthuSundaravadivel requested a review from a team as a code owner February 20, 2026 06:01
@MuthuSundaravadivel

Copy link
Copy Markdown
Member Author

@bestbeforetoday Can you verify the PR

@bestbeforetoday bestbeforetoday dismissed their stale review February 20, 2026 16:23

Spotted an issue after reviewing. package-lock.json also needs to be updated.

@bestbeforetoday bestbeforetoday left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package-lock.json needs to updated in line with the package.json change. This should happen automatically if you use npm to install a new version of the dependency.

Signed-off-by: Muthu  Sundaravadivel <muthu@dhcp-9-90-36-36.n3i-in.ibm.com>
@MuthuSundaravadivel

MuthuSundaravadivel commented Feb 23, 2026

Copy link
Copy Markdown
Member Author

@bestbeforetoday Updated package-lock.json

@bestbeforetoday bestbeforetoday left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the update.

@bestbeforetoday bestbeforetoday merged commit 67f5802 into hyperledger:main Feb 23, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants