Skip to content

Commit

Permalink
build(deps): updated socket.io version to fix security issues with so…
Browse files Browse the repository at this point in the history 
…cket.io-parser and engine.io

A specially crafted Sokcet.IO packet can trigger an uncaught exception on Sokcet.IO Server , thus killing the Node.js process.
Similarly, a specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process.
These are potential security risks which are introduced by using socket.io@4..4.1 and need to be addressed in order to maintain the security of applications using karma.
  • Loading branch information
@sharmanikhil04 @pmvald
sharmanikhil04 authored and pmvald committed Feb 5, 2024
1 parent 86667ab commit 0bffce2
Show file tree
Hide file tree
Showing 2 changed files with 9,944 additions and 6,418 deletions.
Loading

0 comments on commit 0bffce2

Please sign in to comment.