[Snyk] Fix for 1 vulnerabilities

[Omrisnyk]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• large-file/package.json
• large-file/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Denial of Service (DoS) SNYK-JS-WS-7266574	170

Release notes

Package name: engine.io

• 3.4.0 - 2019-09-13
  

  Features

  • add additional debug messages (#586)

  Bug fixes

  • remove deprecated Buffer usage in dependency (#585)

  Diff: 3.3.2...3.4.0
  Client release: 3.4.0
  ws version: ^7.1.2

• 3.3.2 - 2018-11-29
  

  #511 was reverted (see socketio/socket.io#3381)

  Diff: 3.3.1...3.3.2
  Client release: -

• 3.3.1 - 2018-11-19
  

  Bug fixes

  • replace deprecated Buffer usage (#565)

  Milestone: 3.3.1
  Diff: 3.3.0...3.3.1
  Client release: 3.3.1

• 3.3.0 - 2018-11-07
  

  Features

  • allow configuration of Access-Control-Allow-Origin value (#511)

  Milestone: 3.3.0
  Diff: 3.2.1...3.3.0
  Client release: 3.3.0

• 3.2.1 - 2018-11-02
  

  Bug fixes

  • processing error code on abort connection (#562)

  Milestone: 3.2.1
  Diff: 3.2.0...3.2.1

• 3.2.0 - 2018-02-28
  

  Important note ⚠️

  There are two non-breaking changes that are somehow quite important:

  • ws was reverted as the default wsEngine (#550), as there was several blocking issues with uws. You can still use uws by running npm install uws --save in your project and using the wsEngine option:

  var engine = require('engine.io');
  var server = engine.listen(3000, {
    wsEngine: 'uws'
  });

  • pingTimeout now defaults to 5 seconds (instead of 60 seconds): #551

  Milestone: 3.2.0
  Diff: 3.1.5...3.2.0

• 3.1.5 - 2018-02-18
  

  Milestone: 3.1.5
  Diff: 3.1.4...3.1.5

• 3.1.4 - 2017-11-12
  

  Important note ⚠️

  #543 updates the ws package, as the previous version was vulnerable to a Regular Expression Denial of Service (NSP advisory #550). Please update as soon as possible.

  Milestone: 3.1.4
  Diff: 3.1.3...3.1.4

• 3.1.3 - 2017-10-11
  

  Bug fixes

  • fix undefined remoteAddress when using uws (#533)

  Milestone: 3.1.3
  Diff: 3.1.2...3.1.3

• 3.1.2 - 2017-09-27
• 3.1.1 - 2017-09-02
• 3.1.0 - 2017-04-27

from engine.io GitHub release notes

Package name: engine.io-client

• 3.5.4 - 2024-06-18
  

  This release contains a bump of the ws dependency, which includes an important security fix.

  Advisory: GHSA-3h5v-q93c-6h6q

  Links

  • Diff: 3.5.3...3.5.4
  • Server release: -
  • ws@~7.5.10 (diff)
• 3.5.3 - 2022-09-07
• 3.5.2 - 2021-05-05
• 3.5.1 - 2021-03-02
• 3.5.0 - 2020-12-30
• 3.4.4 - 2020-09-30
• 3.4.3 - 2020-06-04
• 3.4.2 - 2020-05-13
• 3.4.1 - 2020-04-17
• 3.4.0 - 2019-09-13
• 3.3.3 - 2021-07-28
• 3.3.2 - 2019-01-20
• 3.3.1 - 2018-11-19
• 3.3.0 - 2018-11-07
• 3.2.1 - 2018-03-09
• 3.2.0 - 2018-02-28
• 3.1.6 - 2018-03-09
• 3.1.5 - 2018-02-18
• 3.1.4 - 2017-11-12
• 3.1.3 - 2017-10-11
• 3.1.2 - 2017-09-27
• 3.1.1 - 2017-05-19

from engine.io-client GitHub release notes

Package name: karma

• 5.0.8 - 2020-05-18
  

  5.0.8 (2020-05-18)

  Bug Fixes

  • dependencies: update and unlock socket.io dependency (#3513) (b60391f)
  • dependencies: update to latest log4js major (#3514) (47f1cb2)
• 5.0.7 - 2020-05-16
  

  5.0.7 (2020-05-16)

  Bug Fixes

  • detect type for URLs with query parameter or fragment identifier (#3509) (f399063), closes #3497
• 5.0.6 - 2020-05-16
  

  5.0.6 (2020-05-16)

  Bug Fixes

  • dependencies: update production dependencies (#3512) (0cd696f)
• 5.0.5 - 2020-05-07
  

  5.0.5 (2020-05-07)

  Bug Fixes

  • cli: restore command line help contents (#3502) (e99da31), closes #3474
• 5.0.4 - 2020-04-30
  

  5.0.4 (2020-04-30)

  Bug Fixes

  • browser: make sure that empty results array is still recognized (#3486) (fa95fa3)
• 5.0.3 - 2020-04-29
  

  5.0.3 (2020-04-29)

  Bug Fixes

  • client: flush resultsBuffer on engine upgrade (#3212) (e44ca94), closes #3211
• 5.0.2 - 2020-04-16
  

  5.0.2 (2020-04-16)

  Bug Fixes

  • ci: stop the proxy before killing the child, handle errors (#3472) (abe9af6), closes #3464
• 5.0.1 - 2020-04-10
  

  5.0.1 (2020-04-10)

  Bug Fixes

  • file-list: do not define fs.statAsync (#3467) (55a59e7)
• 5.0.0 - 2020-04-09
  

  5.0.0 (2020-04-09)

  Bug Fixes

  • install semantic-release as a regular dev dependency (#3455) (1eaf35e)
  • ci: echo travis env that gates release after_success (#3446) (b8b2ed8)
  • ci: poll every 10s to avoid rate limit. (#3388) (91e7e00)
  • middleware/runner: handle file list rejections (#3400) (80febfb), closes #3396 #3396
  • server: cleanup import of the removed method (#3439) (cb1bcbf)
  • server: createPreprocessor was removed (#3435) (5c334f5)
  • server: detection new MS Edge Chromium (#3440) (7166ce2)
  • server: replace optimist on yargs lib (#3451) (ec1e69a), closes #2473
  • server: Report original error message (#3415) (79ee331), closes #3414

  Code Refactoring

  • use native Promise instead of Bluebird (#3436) (33a069f), closes /github.com/karma-runner/karma/pull/3060#discussion_r284797390

  Continuous Integration

  • drop node 8, adopt node 12 (#3430) (a673aa8)

  Features

  • docs: document DEFAULT_LISTEN_ADDR constant (#3443) (057d527), closes #2479
  • karma-server: added log to the server.js for uncaught exception (#3399) (adc6a66)
  • preprocessor: obey Pattern.isBinary when set (#3422) (708ae13), closes #3405

  BREAKING CHANGES

  • Karma plugins which rely on the fact that Karma uses Bluebird promises may break as Bluebird-specific API is no longer available on Promises returned by the Karma core
  • server: Deprecated createPreprocessor removed, karma-browserify < 7 version doesn't work
  • no more testing on node 8.
• 4.4.1 - 2019-10-18
  

  Bug Fixes

  • deps: back to karma-browserstack-launcher 1.4 (#3361) (1cd87ad)
  • server: Add test coverage for config.singleRun true branch. (#3384) (259be0d)
  • if preprocessor is async function and doesn't return a content then await donePromise (#3387) (f91be24)
• 4.4.0 - 2019-10-17
• 4.3.0 - 2019-08-27
• 4.2.0 - 2019-07-12
• 4.1.0 - 2019-04-15
• 4.0.1 - 2019-02-28
• 4.0.0 - 2019-01-23
• 3.1.4 - 2018-12-17
• 3.1.3 - 2018-12-01
• 3.1.2 - 2018-12-01
• 3.1.1 - 2018-10-23
• 3.1.0 - 2018-10-22
• 3.0.0 - 2018-08-09
• 2.0.5 - 2018-07-24
• 2.0.4 - 2018-06-21
• 2.0.3 - 2018-06-15

from karma GitHub release notes

Package name: socket.io

• 2.3.0 - 2019-09-20
• 2.2.0 - 2018-11-28
• 2.1.1 - 2018-05-17
• 2.1.0 - 2018-03-29
• 2.0.4 - 2017-10-22
• 2.0.3 - 2017-06-12
• 2.0.2 - 2017-06-01

from socket.io GitHub release notes

Package name: socket.io-client

• 2.4.0 - 2021-01-04
• 2.3.1 - 2020-09-30
• 2.3.0 - 2019-09-20
• 2.2.0 - 2018-11-28
• 2.1.1 - 2018-05-17
• 2.1.0 - 2018-03-29
• 2.0.4 - 2017-10-22
• 2.0.3 - 2017-06-12
• 2.0.2 - 2017-06-01

from socket.io-client GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)