Title: [Snyk] Fix for 2 vulnerabilities by snyk-bot · Pull Request #9 · CoNETProject/CoNET · GitHub
Open Graph Title: [Snyk] Fix for 2 vulnerabilities by snyk-bot · Pull Request #9 · CoNETProject/CoNET
X Title: [Snyk] Fix for 2 vulnerabilities by snyk-bot · Pull Request #9 · CoNETProject/CoNET
Description: Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes included in this PR Changes to the following files to upgrade the vulnerable dependencies to a fixed version: package.json Vulnerabilities that will be fixed With an upgrade: Severity Priority Score (*) Issue Breaking Change Exploit Maturity 768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 Denial of Service (DoS) SNYK-JS-ENGINEIO-1056749 Yes Proof of Concept 768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 Denial of Service (DoS) SNYK-JS-SOCKETIOPARSER-1056752 Yes Proof of Concept (*) Note that the real score may have changed since the PR was raised. Commit messages Package name: socket.io The new version differs by 57 commits. 1af3267 chore(release): 3.0.0 02951c4 chore(release): 3.0.0-rc4 54bf4a4 feat: emit an Error object upon middleware error aa7574f feat: serve msgpack bundle 64056d6 docs(examples): update TypeScript example cacad70 chore(release): 3.0.0-rc3 d16c035 refactor: rename ERROR to CONNECT_ERROR 5c73733 feat: add support for catch-all listeners 129c641 feat: make Socket#join() and Socket#leave() synchronous 0d74f29 refactor(typings): export Socket class 7603da7 feat: remove prod dependency to socket.io-client a81b9f3 docs(examples): add example with TypeScript 20ea6bd docs(examples): add example with ES modules 0ce5b4c chore(release): 3.0.0-rc2 8a5db7f refactor: remove duplicate _sockets map 2a05042 refactor: add additional typings 91cd255 fix: close clients with no namespace 58b66f8 refactor: hide internal methods and properties 669592d feat: move binary detection back to the parser 2d2a31e chore: publish the wrapper.mjs file ebb0575 chore(release): 3.0.0-rc1 c0d171f test: use the reconnect event of the Manager 9c7a48d test: use the complete export name 4bd5b23 feat: throw upon reserved event names See the full diff Package name: socket.io-client The new version differs by 35 commits. b7e07ba chore(release): 3.0.0 ffa2804 chore(release): 3.0.0-rc4 0939395 feat: emit an Error object upon middleware error 969debe refactor: rework of the Manager events a9127ce chore(release): 3.0.0-rc3 13e1db7 refactor: rename ERROR to CONNECT_ERROR 55f464f feat: add support for catch-all listeners 71d6048 feat: add bundle with msgpack parser f3cbe98 refactor: additional typings 7ddad2c feat: add volatile events b600e78 chore(release): 3.0.0-rc2 1789094 feat: move binary detection back to the parser c7998d5 refactor: add Manager and Socket typings 2c7c230 chore: publish the wrapper.mjs file a66473f chore: use socketio GitHub organization 946a9f0 chore: fix test script a838ff1 chore(release): 3.0.0-rc1 b68f816 chore: bump debug cbabb03 feat: add ES6 module export e826992 refactor: remove the 'connect_timeout' event b60e909 refactor: remove the 'connecting' event 6494f61 feat: throw upon reserved event names 132f8ec feat: split the events of the Manager and Socket 6cd2e4e refactor: remove the packetBuffer array See the full diff Check the changes in this PR to ensure they won't cause issues with your project. Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs. For more information: 🧐 View latest project report 🛠 Adjust project settings 📚 Read more about Snyk's upgrade and patch logic
Open Graph Description: Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes included in this PR Changes to the following files to upgrade the vulnerable depe...
X Description: Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes included in this PR Changes to the following files to upgrade the vulnerable depe...
Opengraph URL: https://github.com/CoNETProject/CoNET/pull/9
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:7fd911a3-abc2-893a-82a2-1bfd5519f01b |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | AE92:16D5E0:540829:727580:6A62D69B |
| html-safe-nonce | bbeefabce63e436286dae975b44d60772e502c494cb9eaffc8a4afd71acedf14 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBRTkyOjE2RDVFMDo1NDA4Mjk6NzI3NTgwOjZBNjJENjlCIiwidmlzaXRvcl9pZCI6IjE1NDE4MTU3NTI5NTI5MzA4MyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 4a4ae546e4c707240b3956d72ecf49a68b29245c8a5fd7f923ed2c1a9c4d8709 |
| hovercard-subject-tag | pull_request:552055439 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/CoNETProject/CoNET/pull/9/files |
| twitter:image | https://avatars.githubusercontent.com/u/19733683?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/19733683?s=400&v=4 |
| og:image:alt | Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes included in this PR Changes to the following files to upgrade the vulnerable depe... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | df33b1b61ee7b9a0af988199bfc3503c9c1acafb1f1d40e1f140ea7c84f890dd |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/CoNETProject/CoNET git https://github.com/CoNETProject/CoNET.git |
| octolytics-dimension-user_id | 19976150 |
| octolytics-dimension-user_login | CoNETProject |
| octolytics-dimension-repository_id | 126087586 |
| octolytics-dimension-repository_nwo | CoNETProject/CoNET |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 126087586 |
| octolytics-dimension-repository_network_root_nwo | CoNETProject/CoNET |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | d41cd1bdb290013455c0ac430fa755621733f5eb |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width