Skip to content

[Snyk] Security upgrade @feathersjs/socketio from 4.3.3 to 4.5.18#33

Open
swina wants to merge 1 commit intomasterfrom
snyk-fix-f6a35c33c3cfdfd901d652c2b60ccd78
Open

[Snyk] Security upgrade @feathersjs/socketio from 4.3.3 to 4.5.18#33
swina wants to merge 1 commit intomasterfrom
snyk-fix-f6a35c33c3cfdfd901d652c2b60ccd78

Conversation

@swina
Copy link
Owner

@swina swina commented Jul 21, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Improper Check for Unusual or Exceptional Conditions
SNYK-JS-FEATHERSJSSOCKETIO-5794666
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @feathersjs/socketio The new version differs by 189 commits.
  • 2d3671d chore(release): publish v4.5.18
  • caa11cf chore: Update package-lock.json
  • 0b9a6b1 fix(transport-commons): Handle invalid service paths on socket lookups (#3242)
  • 022a407 chore(release): publish v4.5.17
  • 7969334 fix(core): Ensure .service does not access Object properties (#3240)
  • 18872c0 chore(release): publish v4.5.16
  • 1936c64 fix(transport-commons): Crow - fix array dispatching (#3073)
  • f5f7fae chore: Update publishin dist tag
  • 70335c4 fix(dependencies): Update dependencies
  • 141ecac chore: Fix changelog name
  • e81cad0 chore: Get builds and installation working again
  • 1f7ee5c chore: Fix NPM page links an images (#2768)
  • 5fe9644 chore: Moving community from slack to discord (#2736)
  • 1774fe0 chore: Update changelog
  • d0e9600 chore(release): publish v4.5.15
  • 849180f chore: Update package-lock.json
  • 25b6fb5 chore(release): publish v4.5.14
  • 5ec2ec8 fix(transport-commons): Ensure socket queries are always plain objects (#2598)
  • 445e804 fix(rest-client): Import errors from @ feathers/errors (#2591)
  • b5e94c4 chore(release): publish v4.5.13
  • 32356a5 fix: Fix socket.io type dependency (#2526)
  • 7fd94ce chore: Fix changelog
  • 8697ecc chore(release): publish v4.5.12
  • 67a7e31 fix(authentication-oauth): OAuth redirect lost sometimes due to session store race (#2514) (#2515)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants