[Snyk] Upgrade @ledgerhq/hw-transport-node-ble from 5.23.0 to 6.15.0 #7

snyk-bot · 2021-12-10T18:56:55Z

Snyk has created this PR to upgrade @ledgerhq/hw-transport-node-ble from 5.23.0 to 6.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 50 versions ahead of your current version.
The recommended version was released a month ago, on 2021-11-12.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @ledgerhq/hw-transport-node-ble

6.15.0 - 2021-11-12
- Fix sequence=0 becomes 0xffffffff when signing (#698)
- update axios and react-native-ble-plx
6.11.2 - 2021-10-28
6.11.0 - 2021-10-21
6.10.0 - 2021-10-18
6.9.1-taproot.0 - 2021-10-14
6.7.0 - 2021-09-16
6.6.0 - 2021-09-06
6.3.0 - 2021-08-01
6.2.0 - 2021-07-19
6.2.0-bsc.5 - 2021-07-19
6.2.0-bsc.4 - 2021-07-19
6.2.0-bsc.3 - 2021-07-13
6.2.0-bsc.2 - 2021-07-13
6.2.0-bsc.1 - 2021-07-13
6.2.0-bsc.0 - 2021-07-13
6.1.0 - 2021-07-06
6.0.2 - 2021-06-21
6.0.1 - 2021-06-21
6.0.1-typescript.0 - 2021-06-09
6.0.0 - 2021-06-21
6.0.0-typescript.3 - 2021-06-04
6.0.0-typescript.1 - 2021-05-26
6.0.0-typescript.0 - 2021-05-18
6.0.0-rc.0 - 2021-06-18
6.0.0-alpha.5 - 2021-05-25
5.51.1 - 2021-05-07
5.51.0 - 2021-05-06
5.50.0 - 2021-04-26
5.49.0 - 2021-04-12
5.48.1-uglifyjs.1 - 2021-04-09
5.48.1-uglify.0 - 2021-04-09
5.48.1-alpha.25 - 2021-05-14
5.48.0 - 2021-03-30
5.46.0 - 2021-03-12
5.45.0 - 2021-03-02
5.43.0 - 2021-02-08
5.42.0 - 2021-01-28
5.41.0 - 2021-01-26
5.40.0 - 2021-01-21
5.39.1 - 2021-01-19
5.39.0 - 2021-01-15
5.38.0 - 2021-01-06
5.36.0 - 2020-12-15
5.34.0 - 2020-12-01
5.33.1-alpha.3 - 2020-11-30
5.30.0 - 2020-11-18
5.29.0 - 2020-11-12
5.28.0 - 2020-10-28
5.26.0 - 2020-10-08
5.25.0 - 2020-09-25
5.23.0 - 2020-09-07

from @ledgerhq/hw-transport-node-ble GitHub release notes

Commit messages

Package name: @ledgerhq/hw-transport-node-ble

135d872 v6.15.0
1b957f1 Update axios & react-native-ble-plx
a18709e Fix sequence=0 becomes 0xffffffff when signing (#698)
5cbdfef v6.14.0
d010b2a LL-8000 – Add support for NFTs (721 and 1155) (#669)
df0b009 add solana spl tokens (#697)
c090d9e v6.13.0
f9b070c ERC20 update
11c1fd2 v6.12.2
bc55c6a update erc20 sig to add polygon ones
00e0137 v6.12.1
5f70a23 Replace react-native unsupported use of Buffer.of with Buffer.from (#696)
3b13acd v6.12.0
52a8a63 LL-7902 add polygon tokens
7cd9195 LL-7922 add polygon in currencies list
0f9edfd Fix detection of hardened path index 0' (#695)
1ffa835 ensure `ecc_parity` is positive (#694)
d243550 v6.11.2
88ca17a GET_MERKLE_LEAF_PROOF: Switch from 4 byte ints to varints (#687)
7c222e9 Refactoring: Move account specific behavior to separate classes (#693)
b1c4801 Fix restriction on change path item and log warn (#692)
bfd9150 LL-6633 update lnsp block size
483aa05 v6.11.1
e10de16 Pass sigHashType to device (#690)