# ethers.js v5.8.0 — ethers/v5.8.0 (2025-02-25 19:15) [legacy version]

- Product: ethers.js (https://whatsnew.fyi/product/ethers-js)
- Vendor: ethers
- Date: 2025-02-26
- Version: v5.8.0
- Original notes: https://github.com/ethers-io/ethers.js/releases/tag/v5.8.0
- Permalink: https://whatsnew.fyi/product/ethers-js/releases/v5.8.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Updated to latest elliptic library to fix audit warnings
- **security** — Bumped ws package version to address DoS security concern
- **added** — Added ENS to Sepolia
- **changed** — Added modern networks, updated third-party backend URLs and added QuickNode

This is a security update for the **legacy** Ethers v5 branch, addressing two security fixes.

- A bug in `elliptic`, which **does not affect ethers** but triggers a *critical security warning* during `nom audit` [see: [missing signature length check](https://github.com/advisories/GHSA-f7q4-pwc6-w24p), [missing check for leading bit](https://github.com/advisories/GHSA-977x-g7h5-7qgw), [allow BER-encoded signatures](https://github.com/advisories/GHSA-49q7-c7j4-3p7m), [false negative verification](https://github.com/advisories/GHSA-fc9h-whq2-v747), [signing malformed input](https://github.com/advisories/GHSA-434g-2637-qmqr)]
- A bug in `ws` which can be used as DoS vector when communicating with malicious WebSocket service providers, triggering a *high security warning* during `nom audit` [see: [too many HTTP headers](https://github.com/advisories/GHSA-3h5v-q93c-6h6q)]

For those that wish to audit the specific changes in the the bundled version between v5.7 and v5.8, see [this gist](https://gist.github.com/ricmoo/05da10dd949940614d5ba506617bca42).

###### Changes

- Updated to latest elliptic library to fix audit warnings. ([f8deaae](https://github.com/ethers-io/ethers.js/commit/f8deaae8d16e0ebc8ec632c76c29833c67047c7b))
- Added ENS to Sepolia. ([0065547](https://github.com/ethers-io/ethers.js/commit/006554730e4fc3ba558f808e91039711c4b6bfe1))
- Bump ws package version to address DoS security concern. ([#4791](https://github.com/ethers-io/ethers.js/issues/4791); [f345816](https://github.com/ethers-io/ethers.js/commit/f345816cf202fbaffa046bff7083c2c25d21f6cd))
 - Added modern networks, updated third-party backend URLs and added QuickNode. ([#3935](https://github.com/ethers-io/ethers.js/issues/3935), [#4010](https://github.com/ethers-io/ethers.js/issues/4010); [f7c813d](https://github.com/ethers-io/ethers.js/commit/f7c813d3130f4790be4381c06ee5e56c8d513c79))
 
----

**Embedding UMD with [SRI](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity):**
```html
<script type="text/javascript"
  integrity="sha384-KpyAXoFibPIUEi79EsnN1EtEWCCrOQ8MtGsa4IrVxeZo514PYarFXujnjyu0DzgC"
  crossorigin="anonymous"
  src="https://cdnjs.cloudflare.com/ajax/libs/ethers/5.8.0/ethers.umd.min.js">
</script>
```