[Snyk] Upgrade socket.io from 1.3.7 to 2.3.0 #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

snyk-bot wants to merge 1 commit into master from snyk-upgrade-069f0cedb55465fd27fabf7445f5a099

snyk-bot commented Oct 26, 2019

Snyk has created this PR to upgrade socket.io from 1.3.7 to 2.3.0.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 28 versions ahead of your current version.
The recommended version was released a month ago, on 2019-09-20.

The recommended version fixes:

Severity	Title	Issue ID
	Insecure Defaults	npm:engine.io-client:20160426
	Regular Expression Denial of Service (ReDoS)	npm:parsejson:20170908
	Denial of Service (DoS)	npm:ws:20160624
	Denial of Service (DoS)	npm:ws:20171108
	Remote Memory Exposure	npm:ws:20160104
	Insecure Randomness	npm:ws:20160920

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          chore: upgrade socket.io from 1.3.7 to 2.3.0

edbb5f3

Snyk has created this PR to upgrade socket.io from 1.3.7 to 2.3.0.

See this package in NPM:
https://www.npmjs.com/package/socket.io

See this project in Snyk:
https://app.snyk.io/org/ajesse11x/project/3a1b20c7-61b4-4b2c-a2f0-f168ec8dd464?utm_source=github&utm_medium=upgrade-pr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet