[Snyk] Upgrade socket.io-parser from 4.0.5 to 4.2.1

[TwistedHardware]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade socket.io-parser from 4.0.5 to 4.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2022-06-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Access Restriction Bypass SNYK-JS-XMLHTTPREQUESTSSL-1255647	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Arbitrary Code Injection SNYK-JS-XMLHTTPREQUESTSSL-1082936	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Denial of Service (DoS) npm:ws:20171108	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: socket.io-parser

• 4.2.1 - 2022-06-27
  

  Bug Fixes

  • check the format of the index of each attachment (b5d0cb7)

  Links

  • Diff: 4.2.0...4.2.1
• 4.2.0 - 2022-04-17
  

  Features

  • allow the usage of custom replacer and reviver (#112) (b08bc1a)

  Links

  • Diff: 4.1.2...4.2.0
• 4.1.2 - 2022-02-17
  

  Bug Fixes

  • allow objects with a null prototype in binary packets (#114) (7f6b262)

  Links

  • Diff: 4.1.1...4.1.2
• 4.1.1 - 2021-10-14
  

  Links

  • Diff: 4.1.0...4.1.1
• 4.1.0 - 2021-10-11
  

  Features

  • provide an ESM build with and without debug (388c616)

  Links

  • Diff: 4.0.4...4.1.0
• 4.0.5 - 2022-06-27
  

  Bug Fixes

  • check the format of the index of each attachment (b559f05)

  Links

  • Diff: 4.0.4...4.0.5

from socket.io-parser GitHub release notes

Commit messages

Package name: socket.io-parser

• 5a2ccff chore(release): 4.2.1
• b5d0cb7 fix: check the format of the index of each attachment
• c7514b5 chore(release): 4.2.0
• 931f152 chore: add Node.js 16 in the test matrix
• 6c9cb27 chore: bump @ socket.io/component-emitter to version 3.1.0
• b08bc1a feat: allow the usage of custom replacer and reviver ([Snyk] Security upgrade socket.io-adapter from 1.0.0 to 1.1.1 #112)
• aed252c chore(release): 4.1.2
• 89209fa chore: bump cached-path-relative from 1.0.2 to 1.1.0 ([Snyk] Upgrade engine.io from 1.5.4 to 1.8.5 #113)
• 0a3b556 chore: bump path-parse from 1.0.6 to 1.0.7 ([Snyk] Security upgrade socket.io-parser from 2.2.4 to 4.0.5 #108)
• 7f6b262 fix: allow objects with a null prototype in binary packets ([Snyk] Upgrade socket.io-client from 1.3.7 to 1.7.4 #114)
• 8e8346b chore: bump ajv from 6.12.2 to 6.12.6 ([Snyk] Upgrade socket.io-adapter from 1.0.0 to 1.1.2 #115)
• ea86f41 chore(release): 4.1.1
• eb708d1 chore: bump @ socket.io/component-emitter to version 3.0.0
• 5ad3e5c chore(release): 4.1.0
• 388c616 feat: provide an ESM build with and without debug
• 75530b4 chore: bump browserslist from 4.12.0 to 4.16.6 ([Snyk] Fix for 11 vulnerabilities #106)
• 57324f3 chore: bump elliptic from 6.5.3 to 6.5.4 (Nullable Foreign key #102)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs