From 337963bff840008e77df34fa26634c570c7502a5 Mon Sep 17 00:00:00 2001 From: Susmitha Girumala Date: Wed, 22 Apr 2026 12:25:35 -0400 Subject: [PATCH] =?UTF-8?q?chore:=20=F0=9F=A4=96=20Upgrade=20socket.io-par?= =?UTF-8?q?ser=20to=20fix=20sec=20vuln=20(#3244)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes CVE 2026 33151 ✅ Closes: https://github.com/hashicorp/boundary-ui/security/dependabot/269 --- pnpm-lock.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 9a8f66098..a5f5883d9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -8383,8 +8383,8 @@ packages: socket.io-adapter@2.5.5: resolution: {integrity: sha512-eLDQas5dzPgOWCk9GuuJC2lBqItuhKI4uxGgo9aIV7MYbk2h9Q6uULEh8WBzThoI7l+qU9Ast9fVUmkqPP9wYg==} - socket.io-parser@4.2.4: - resolution: {integrity: sha512-/GbIKmo8ioc+NIWIhwdecY0ge+qVBSMdgxGygevmdHj24bsfgtCmcUUcQ5ZzcylGFHsN3k4HB4Cgkl96KVnuew==} + socket.io-parser@4.2.6: + resolution: {integrity: sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==} engines: {node: '>=10.0.0'} socket.io@4.8.1: @@ -18508,10 +18508,10 @@ snapshots: - supports-color - utf-8-validate - socket.io-parser@4.2.4: + socket.io-parser@4.2.6: dependencies: '@socket.io/component-emitter': 3.1.2 - debug: 4.3.7 + debug: 4.4.3 transitivePeerDependencies: - supports-color @@ -18523,7 +18523,7 @@ snapshots: debug: 4.3.7 engine.io: 6.6.4 socket.io-adapter: 2.5.5 - socket.io-parser: 4.2.4 + socket.io-parser: 4.2.6 transitivePeerDependencies: - bufferutil - supports-color