Commit 3b8749a

Mirko Garin

authored and

Mirko Garin

committed

fix: override socket.io-parser to patch CVE-2026-6918

Karma pulls socket.io-parser 3.2.0 transitively via socket.io 2.1.1, which is vulnerable to a memory exhaustion DoS (GHSA-2m8v-j782-fhvr). Force resolution to 3.4.5 via npm overrides.

1 parent 38a2e9f commit 3b8749aCopy full SHA for 3b8749a

2 files changed

Angular/angular
- package-lock.json
- package.json

Comments

(0)

File tree

0 commit comments