Critical Security Notice: Upgrade Wallet Gateway to v1.13.0

We strongly urge all Wallet Gateway users to upgrade to v1.13.0 (released on Oct 17) immediately due to a critical Node.js security vulnerability that could potentially lead to Remote Code Execution (RCE) (for more information, see the official Node.js security advisory).

Users running Wallet Gateway (WG) through the Splice bundle should be able to upgrade independently, without upgrading other services. The approach depends on how they deployed Splice:
• Docker Compose: Update only the Wallet Gateway service’s image tag to 1.13.0, then recreate that service. Link
• Kubernetes / Helm: Update only the Wallet Gateway image version in the relevant Helm values, and apply the change without upgrading the other services. Link

For standalone users, the above Docker and Helm links apply as well, and the NPM package is found here. Link

Please prioritize this upgrade to minimize potential security exposure.