Security vulnerability analysis for dependencies of contracts package

[sachindkagrawal15]

Security vulnerability analysis for dependencies of contracts package

3 vulnerabilities (2 low, 1 moderate)

vulnerability # 1

@openzeppelin/contracts 4.5.0 - 4.9.5
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory - GHSA-9vx6-7xxf-x967
node_modules/@openzeppelin/contracts

vulnerability # 2

follow-redirects <=1.15.5
Severity: moderate
Follow Redirects improperly handles URLs in the url.parse() function - GHSA-jchw-25xp-jwwc
follow-redirects' Proxy-Authorization header kept across hosts - GHSA-cxjh-pqwp-8mfp
node_modules/follow-redirects

vulnerability # 3

undici <=5.28.3
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect - GHSA-9qxr-qj54-h672
Undici proxy-authorization header not cleared on cross-origin redirect in fetch - GHSA-3787-6prv-h9w3
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline - GHSA-m4v8-wqvr-p9f7