Description

I am currently developing a Node.js application that utilizes the Karma package. During a vulnerability scan on my package-lock.json file using Vulert.com, I discovered a security vulnerability in the socket.io-parser library, which is a dependency of Moment. To address this issue and enhance the security of our application, I propose upgrading the socket.io-parser library to version 4.0.5.

Details

• Vulert Scan Report: Vulert Report
• CVE Reference: CVE-2022-2421