Depending on vulnerable package ws 8.13.0 about wagmi HOT 4 CLOSED

Updated Safe SDK here: cc996e0

from wagmi.

Please upgrade viem to >=2.15.1.

from wagmi.

It is not a direct dependency and is a Wagmi dependency for us. Actually [email protected] is the most downloaded version of Viem, and it is right behind version 2.x, which is a major version. This should be the reason that other packages are still on this version.
In Wagmi's case the problem is:
Wagmi Connectors (latest) --depending on-->
@safe-global/safe-apps-sdk (8.1.0) (next version is 9.x which is major version) --depending on-->
viem (1.21.4) (next version is 2.x which is major version)

Considering the download volume of [email protected], and the impact of vulnerability it might cause, I hope you can release a patch for [email protected] to use [email protected], which should be minor not breaking change.
Thank you in advance

from wagmi.

This issue has been locked since it has been closed for more than 14 days.

If you found a concrete bug or regression related to it, please open a new bug report with a reproduction against the latest Wagmi version. If you have any questions or comments you can create a new discussion thread.

from wagmi.