Skip to content

Commit

Permalink
chore(version): updated socket.io version to fix security issues with…
Browse files Browse the repository at this point in the history 
… socket.io-parser and engine.io

A specially crafted Sokcet.IO packet can trigger an uncaught exception on Sokcet.IO Server , thus killing the Node.js process.
Similarly, a specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process.
These are potential security risks which are introduced by using socket.io@4..4.1 and need to be addressed in order to maintain the security of applications using karma.
  • Loading branch information
@sharmanikhil04 @pmvald
sharmanikhil04 authored and pmvald committed Feb 5, 2024
1 parent 450fdfd commit 900553b
Show file tree
Hide file tree
Showing 2 changed files with 9,954 additions and 6,446 deletions.

0 comments on commit 900553b

Please sign in to comment.