From a5368d0f82fed63e1de21768ce27464f040b58f5 Mon Sep 17 00:00:00 2001
From: Trent Larson <trent@trentlarson.com>
Date: Tue, 9 Jan 2024 17:54:37 -0700
Subject: [PATCH] update library with vulnerability

---
 package-lock.json | 16 ++++++++--------
 package.json      |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 5ca30ad59..bd43283f8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -40,7 +40,7 @@
         "js-yaml": "^4.1.0",
         "localstorage-slim": "^2.5.0",
         "luxon": "^3.4.3",
-        "merkletreejs": "^0.3.10",
+        "merkletreejs": "^0.3.11",
         "moment": "^2.29.4",
         "notiwind": "^2.0.2",
         "papaparse": "^5.4.1",
@@ -12954,9 +12954,9 @@
       }
     },
     "node_modules/crypto-js": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-3.3.0.tgz",
-      "integrity": "sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q=="
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q=="
     },
     "node_modules/crypto-ld": {
       "version": "7.0.0",
@@ -20070,13 +20070,13 @@
       }
     },
     "node_modules/merkletreejs": {
-      "version": "0.3.10",
-      "resolved": "https://registry.npmjs.org/merkletreejs/-/merkletreejs-0.3.10.tgz",
-      "integrity": "sha512-lin42tKfRdkW+6iE5pjtQ9BnH+1Hk3sJ5Fn9hUUSjcXRcJbSISHgPCfYvMNEXiNqZPhz/TyRPEV30qgnujsQ7A==",
+      "version": "0.3.11",
+      "resolved": "https://registry.npmjs.org/merkletreejs/-/merkletreejs-0.3.11.tgz",
+      "integrity": "sha512-LJKTl4iVNTndhL+3Uz/tfkjD0klIWsHlUzgtuNnNrsf7bAlXR30m+xYB7lHr5Z/l6e/yAIsr26Dabx6Buo4VGQ==",
       "dependencies": {
         "bignumber.js": "^9.0.1",
         "buffer-reverse": "^1.0.1",
-        "crypto-js": "^3.1.9-1",
+        "crypto-js": "^4.2.0",
         "treeify": "^1.1.0",
         "web3-utils": "^1.3.4"
       },
diff --git a/package.json b/package.json
index 7f48b9aa1..b82627fca 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "js-yaml": "^4.1.0",
     "localstorage-slim": "^2.5.0",
     "luxon": "^3.4.3",
-    "merkletreejs": "^0.3.10",
+    "merkletreejs": "^0.3.11",
     "moment": "^2.29.4",
     "notiwind": "^2.0.2",
     "papaparse": "^5.4.1",