Blockchain Explorer Versions Save

New Features

• Support for HLFabric v1.4.0 - v1.4.4

Bug Fixes and Updates

• Bring code quality to A grade
• Refine app and client e2e-test environment for v1.4.4
• Fix an issue to fail detecting newly added channel
• Update packages
• Fix an issue to fail detecting newly added channel
• Online docs updates
• CI/CD, add code coverage report to Azure Pipeline
• CI/CD, code quality configuration

Known Vulnerabilities

• See https://github.com/hyperledger/blockchain-explorer/blob/master/release_notes/v1.0.0-rc2.md#known-vulnerabilities

Resolved Vulnerabilities

• Fixes to security vulnerability applied

New Features

• Added column for block size on BLOCK view page
• Added orderer to network view page
• Create online documentation
• Add default GitHub SECURITY policy
• Switching to Azure Pipeline, and GitHub pull request
• Gerrit EOL, no longer supported

Bug Fixes and Updates

• Update packages
• Fixed broken links in README.md

Known Vulnerabilities

• "helmet": "^3.21.1"

Resolved Vulnerabilities

• Updated to "helmet": "^3.21.1" to fix security vulnerability

Support for Hyperledger Fabric 1.4 Applied tag v0.3.9.1 Bug Fixes and Updates Fix for Docker image publish fail Fix for discovery protocol when TLS enabled

Support for Hyperledger Fabric 1.4 Applied tag v0.3.9 Bug Fixes and Updates Support for working with fabric-ca Updated footer with supported fabric version Known Vulnerabilities High Missing Origin Validation Package webpack-dev-server Dependency of react-scripts Path react-scripts > webpack-dev-server More info https://nodesecurity.io/advisories/725 Resolved Vulnerabilities All known vulnerabilities fixed

Support for Hyperledger Fabric 1.3

• Applied tag v0.3.8

• Updated footer with supported fabric version

• Low Prototype Pollution Package deep-extend Dependency of fabric-client Path fabric-client > grpc > node-pre-gyp > rc > deep-extend More info https://nodesecurity.io/advisories/612

• High Insufficient Entropy Package cryptiles Dependency of fabric-client Path fabric-client > grpc > node-pre-gyp > request > hawk > cryptiles More info https://nodesecurity.io/advisories/720

• Moderate Out-of-bounds Read Package stringstream Dependency of fabric-client Path fabric-client > grpc > node-pre-gyp > request > stringstream More info https://nodesecurity.io/advisories/664

• High Missing Origin Validation Package webpack-dev-server Dependency of react-scripts Path react-scripts > webpack-dev-server More info https://nodesecurity.io/advisories/725

• Low Prototype pollution Package merge Dependency of react-scripts Path react-scripts > jest > jest-cli > jest-haste-map > sane > exec-sh > merge More info https://nodesecurity.io/advisories/722

• Low Prototype pollution Package merge Dependency of react-scripts Path react-scripts > jest > jest-cli > jest-runtime > jest-haste-map > sane > exec-sh > merge More info https://nodesecurity.io/advisories/722

• Fixed security vulnerabilities listed above

New Features

Bug Fixes and Updates

• Fix insecure websocket warning running under https
• Error handle logics are not correct in pgservice.js
• Add channel name to block notifications in UI

Known Vulnerabilities

Resolved Vulnerabilities