[NIFI-13958] Upgrade elliptic to 6.6.0 for Registry

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Component/s: NiFi Registry
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 01/Nov/24 14:15
• Updated: 02/Nov/24 18:39
• Resolved: 02/Nov/24 18:39

Description

The elliptic library is a transitive dependency of Webpack for NiFi Registry, used during development builds, and should be upgraded to 6.6.0 to mitigate CVE-2024-48948 related to signature verification. As this is a development build dependency, it does not impact any runtime behavior.

Issue Links

• links to: GitHub Pull Request #9474