Skip to content

Commit 0bffce2

Browse files
sharmanikhil04pmvald
authored andcommitted
build(deps): updated socket.io version to fix security issues with socket.io-parser and engine.io
A specially crafted Sokcet.IO packet can trigger an uncaught exception on Sokcet.IO Server , thus killing the Node.js process. Similarly, a specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. These are potential security risks which are introduced by using socket.io@4..4.1 and need to be addressed in order to maintain the security of applications using karma.
1 parent 86667ab commit 0bffce2

2 files changed

Lines changed: 9944 additions & 6418 deletions

File tree

0 commit comments

Comments
 (0)