Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Updated socket.io version to fix security issues with socket.io-parser and engine.io #3867

Merged
merged 1 commit into from
Feb 5, 2024
Merged

Updated socket.io version to fix security issues with socket.io-parser and engine.io #3867

merged 1 commit into from
Feb 5, 2024

Commits on Feb 5, 2024

  1. build(deps): updated socket.io version to fix security issues with so… 

    …cket.io-parser and engine.io

A specially crafted Sokcet.IO packet can trigger an uncaught exception on Sokcet.IO Server , thus killing the Node.js process.
Similarly, a specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process.
These are potential security risks which are introduced by using socket.io@4..4.1 and need to be addressed in order to maintain the security of applications using karma.
    @sharmanikhil04 @pmvald
    sharmanikhil04 authored and pmvald committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    fc71bf2 View commit details
    Browse the repository at this point in the history