javascriptsocketio/socket.io #5206Not a task: not reproduced

vuln: cookie package

envgap__socketio__socket.io-5206

Original GitHub issue ↗Dated source checkout ↗Opened 2024-10-07

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

In a clean container the reported failure did not reproduce, or the known fix did not make the project run.

02 / ENVIRONMENT RECIPE

Base commit: d0fc72042068e7eaef448941add617f05e1ec236
Manifest: packages/engine.io/package.json
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

socketio/socket.io #5206 · read the original issue

before version 0.7.0 `cookie` package has vuln (https://github.com/advisories/GHSA-pxg6-pf52-xh8x).

https://github.com/socketio/socket.io/blob/d0fc72042068e7eaef448941add617f05e1ec236/packages/engine.io/package.json#L39

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]