[Snyk] Fix for 1 vulnerabilities

[ekmixon]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/latency/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: engine.io

The new version differs by 23 commits.

• 9b62152 chore(release): 4.0.6
• 5a91253 chore: bump ws and debug versions
• fffa0a3 chore: update GitHub issue templates
• cec2750 fix: correctly pass the options when using the Server constructor (fix: correctly pass the options when using the Server constructor socketio/engine.io#610)
• 04ea358 docs(changelog): include changelog for release 3.5.0
• e7115b8 chore(release): 4.0.5
• f5efa1e refactor: use ES6 syntax for the tests
• 312bd35 ci: migrate to GitHub Actions
• c2981c6 chore(release): 4.0.4
• 67ca12c chore(release): 4.0.3
• 9ddccf3 chore: bump engine.io-client
• 16fd658 chore(release): 4.0.2
• 17b8c2f fix: add extension in the package.json main entry (package.json main entry missing extension socketio/engine.io#608)
• 3284208 chore: bump engine.io-client
• 58943c3 chore(release): 4.0.1
• c099338 refactor: remove binary handling for the polling transport
• fe093ba fix: do not overwrite CORS headers upon error
• f9c0e74 chore: bump eiows to 3.3.2
• a05379b test: use eiows
• 428b4f5 docs: update links to other repositories
• ec83022 docs: update examples with ES6 syntax
• 6092239 docs: update latency example
• 70b1c36 chore(release): 4.0.0

See the full diff

Package name: engine.io-client

The new version differs by 29 commits.

• 2bd444a chore(release): 4.0.6
• aeaf072 chore: bump ws and debug versions
• acb2216 chore: update GitHub issue templates
• ab8c746 docs(changelog): include changelog for release 3.5.0
• 70b3551 style: fix Russian spelling (Downgrade engine_socket transport error "polling request overlap" to 4xx from 5xx socketio/engine.io#650)
• afd25b4 chore(release): 4.0.5
• 5c9726c docs: fix withCredentials default value
• 587ccf3 refactor: remove the policyPort option
• 9146a57 chore: bump dev dependencies
• 20f7fe0 ci: migrate to GitHub Actions
• c226815 refactor: avoid redeclaring const in xhr polling transport ([TS] socket.send / socket.write arguments socketio/engine.io#645)
• 091a619 chore(release): 4.0.4
• 1c8cba8 fix: check the type of the initial packet
• 4873a23 fix: restore the cherry-picking of the WebSocket options
• 8228a43 chore(release): 4.0.3
• 89cb771 refactor: remove binary handling for the polling transport (bis)
• 177b95f fix(react-native): exclude the localAddress option
• ccb99e3 fix(react-native): add a default value for the withCredentials option
• 82987d5 chore: bump engine.io version
• b6df250 chore(release): 4.0.2
• ec3f677 refactor: remove binary handling for the polling transport
• 1764916 chore: bump engine.io
• 276597f chore(release): 4.0.1
• a54e417 chore: bump elliptic from 6.5.2 to 6.5.3 (Allow CorsOptionsDelegate as cors options socketio/engine.io#641)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[secure-code-warrior-for-github]

Micro-Learning Topic: Regular expression denial of service (Detected by phrase)

Matched on "Regular Expression Denial of Service"

What is this? (2min video)

Denial of Service (DoS) attacks caused by Regular Expression which causes the system to hang or cause them to work very slowly when attacker sends a well-crafted input(exponentially related to input size).Denial of service attacks significantly degrade the service quality experienced by legitimate users. These attacks introduce large response delays, excessive losses, and service interruptions, resulting in direct impact on availability.

Try a challenge in Secure Code Warrior

Micro-Learning Topic: Denial of service (Detected by phrase)

Matched on "Denial of Service"

The Denial of Service (DoS) attack is focused on making a resource (site, application, server) unavailable for the purpose it was designed. There are many ways to make a service unavailable for legitimate users by manipulating network packets, programming, logical, or resources handling vulnerabilities, among others. Source: https://www.owasp.org/index.php/Denial_of_Service

Try a challenge in Secure Code Warrior