fiddle
fiddle copied to clipboard
[Snyk] Security upgrade socket.io from 3.0.0 to 4.5.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Denial of Service (DoS) SNYK-JS-ENGINEIO-3136336 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: socket.io
The new version differs by 142 commits.- 8ecfcba chore(release): 4.5.0
- 572133a docs(examples): update example with webpack
- 6e1bb62 chore: bump engine.io to version 6.2.0
- 06e6838 docs(examples): add server bundling example with rollup
- 1f03a44 docs(examples): update create-react-app example (#4347)
- be3d7f0 docs(examples): add TODO example with Postgres and Node.js cluster
- d12aab2 docs(examples): add example with express-session
- 9f75868 docs(examples): pin the version of karma-jasmine-html-reporter
- 0b35dc7 refactor: make the protocol implementation stricter
- 531104d feat: add support for catch-all listeners for outgoing packets
- 8b20457 feat: broadcast and expect multiple acks
- 0b7d70c chore: bump lockfile to v2
- 2f96438 chore: bump engine.io version to fix CVE-2022-21676 (#4262)
- 02c87a8 fix(typings): ensure compatibility with TypeScript 3.x (#4259)
- 37b6d8f chore: update default label for bug reports
- af54565 docs: remove broken badges
- aa5312a chore: revert to lockfile v1
- c82a4bd chore(release): 4.4.1
- 770ee59 fix(types): make `RemoteSocket.data` type safe (#4234)
- 3bf5d92 refactor: add note about fetchSockets() for parent namespaces
- fc82e44 refactor(typings): export Event type (#4215)
- c840bad test: fix flaky tests
- f2b8de7 fix(typings): pass `SocketData` type to custom namespaces (#4233)
- 51784d0 chore: add types to exports field to be compatible with nodenext module resolution (#4228)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: