[Snyk] Upgrade web3 from 1.2.5-rc.0 to 1.10.4

[vporton]

Snyk has created this PR to upgrade web3 from 1.2.5-rc.0 to 1.10.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 76 versions ahead of your current version.

• The recommended version was released a year ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improper Validation of Integrity Check Value SNYK-JS-SECP256K1-8237220	666	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	666	Proof of Concept
	Information Exposure SNYK-JS-SIMPLEGET-2361683	666	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	666	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	666	Proof of Concept
	Remote Memory Exposure SNYK-JS-BL-608877	666	Proof of Concept
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	666	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	666	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	666	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	666	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	666	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	666	No Known Exploit
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	666	No Known Exploit
	Improper Verification of Cryptographic Signature SNYK-JS-BROWSERIFYSIGN-6037026	666	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	666	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	666	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	666	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	666	No Known Exploit
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	666	No Known Exploit
	Open Redirect SNYK-JS-GOT-2932019	666	No Known Exploit
	Open Redirect SNYK-JS-GOT-2932019	666	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	666	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	666	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	666	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-COOKIEJAR-3149984	666	Proof of Concept
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-DECOMPRESS-557358	666	Proof of Concept
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-DECOMPRESSTAR-559095	666	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	666	No Known Exploit
	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	666	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	666	No Known Exploit
	Timing Attack SNYK-JS-ELLIPTIC-511941	666	No Known Exploit
	Cross-site Scripting SNYK-JS-SEND-7926862	666	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	666	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	666	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-2429795	666	Proof of Concept

Release notes

Package name: web3

• 1.10.4 - 2024-02-05
• 1.10.4-dev.0 - 2024-01-31
• 1.10.3 - 2023-10-18
• 1.10.3-dev.0 - 2023-10-16
• 1.10.2 - 2023-08-28
• 1.10.1 - 2023-08-14
• 1.10.1-rc.0 - 2023-08-08
• 1.10.0 - 2023-05-10
• 1.10.0-rc.0 - 2023-05-02
• 1.9.0 - 2023-03-20
• 1.9.0-rc.0 - 2023-03-07
• 1.8.2 - 2023-01-30
• 1.8.2-rc.0 - 2023-01-11
• 1.8.1 - 2022-11-10
• 1.8.1-rc.0 - 2022-10-28
• 1.8.0 - 2022-09-14
• 1.8.0-rc.0 - 2022-09-08
• 1.7.5 - 2022-08-01
• 1.7.5-rc.1 - 2022-07-19
• 1.7.5-rc.0 - 2022-07-15
• 1.7.4 - 2022-06-21
• 1.7.4-rc.2 - 2022-06-16
• 1.7.4-rc.1 - 2022-06-08
• 1.7.4-rc.0 - 2022-05-17
• 1.7.3 - 2022-04-08
• 1.7.3-rc.0 - 2022-04-07
• 1.7.2 - 2022-04-07
• 1.7.2-rc.0 - 2022-03-24
• 1.7.1 - 2022-03-03
• 1.7.1-rc.0 - 2022-02-10
• 1.7.0 - 2022-01-17
• 1.7.0-rc.0 - 2021-12-09
• 1.6.1 - 2021-11-15
• 1.6.1-rc.3 - 2021-11-10
• 1.6.1-rc.2 - 2021-10-27
• 1.6.1-rc.0 - 2021-10-09
• 1.6.0 - 2021-09-30
• 1.6.0-rc.0 - 2021-09-26
• 1.5.3 - 2021-09-22
• 1.5.3-rc.0 - 2021-09-10
• 1.5.2 - 2021-08-15
• 1.5.2-rc.0 - 2021-08-15
• 1.5.1 - 2021-08-05
• 1.5.1-rc.1 - 2021-08-05
• 1.5.1-rc.0 - 2021-07-31
• 1.5.0 - 2021-07-28
• 1.5.0-rc.1 - 2021-07-24
• 1.5.0-rc.0 - 2021-07-21
• 1.4.0 - 2021-06-30
• 1.4.0-rc.0 - 2021-06-25
• 1.3.6 - 2021-05-14
• 1.3.6-rc.2 - 2021-05-13
• 1.3.6-rc.1 - 2021-05-09
• 1.3.5 - 2021-04-05
• 1.3.5-rc.0 - 2021-03-24
• 1.3.4 - 2021-02-03
• 1.3.4-rc.2 - 2021-01-28
• 1.3.4-rc.1 - 2021-01-26
• 1.3.3 - 2021-01-22
• 1.3.2 - 2021-01-21
• 1.3.2-rc.2 - 2021-01-21
• 1.3.1 - 2020-12-17
• 1.3.0 - 2020-09-15
• 1.3.0-rc.0 - 2020-09-02
• 1.2.11 - 2020-07-18
• 1.2.10 - 2020-07-17
• 1.2.10-rc.0 - 2020-07-09
• 1.2.9 - 2020-06-09
• 1.2.9-rc.0 - 2020-06-02
• 1.2.8 - 2020-05-20
• 1.2.8-rc.1 - 2020-05-18
• 1.2.8-rc.0 - 2020-05-08
• 1.2.7 - 2020-04-24
• 1.2.7-rc.0 - 2020-04-15
• 1.2.6 - 2020-02-02
• 1.2.5 - 2020-01-27
• 1.2.5-rc.0 - 2020-01-16

from web3 GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs