From ef5ff3c94b25ba5f4112aecd1b19fcdc0759c31c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 30 Sep 2022 00:44:40 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ENGINEIO-1056749 - https://snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-1056752 - https://snyk.io/vuln/SNYK-JS-WS-1296835 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:negotiator:20160616 - https://snyk.io/vuln/npm:ws:20160104 - https://snyk.io/vuln/npm:ws:20160624 - https://snyk.io/vuln/npm:ws:20160920 - https://snyk.io/vuln/npm:ws:20171108 --- package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 9f04b3f654..dd0f751b22 100644 --- a/package.json +++ b/package.json @@ -21,12 +21,12 @@ "test": "mocha --reporter dot --slow 200ms --bail" }, "dependencies": { - "engine.io": "1.6.4", - "socket.io-parser": "2.2.6", + "engine.io": "4.0.0", + "socket.io-parser": "3.3.2", "socket.io-client": "automattic/socket.io-client#master", - "socket.io-adapter": "0.4.0", + "socket.io-adapter": "1.1.1", "has-binary": "0.1.7", - "debug": "2.2.0" + "debug": "2.6.9" }, "devDependencies": { "expect.js": "0.3.1",