Commit 0bffce2
build(deps): updated socket.io version to fix security issues with socket.io-parser and engine.io
A specially crafted Sokcet.IO packet can trigger an uncaught exception on Sokcet.IO Server , thus killing the Node.js process.
Similarly, a specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process.
These are potential security risks which are introduced by using socket.io@4..4.1 and need to be addressed in order to maintain the security of applications using karma.1 parent 86667ab commit 0bffce2
2 files changed
Lines changed: 9944 additions & 6418 deletions
0 commit comments