Skip to content

Releases: socketio/socket.io-parser

3.3.4

22 Jul 09:14
1e9ebc6
Compare
Choose a tag to compare

Bug Fixes

Links

4.2.4

19 Jun 06:18
164ba2a
Compare
Choose a tag to compare

Bug Fixes

  • ensure reserved events cannot be used as event names (d9db473)
  • properly detect plain objects (b0e6400)

Links

4.2.3

22 May 08:25
b6c824f
Compare
Choose a tag to compare

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

TypeError: Cannot convert object to primitive value
       at Socket.emit (node:events:507:25)
       at .../node_modules/socket.io/lib/socket.js:531:14

Please upgrade as soon as possible.

Bug Fixes

  • check the format of the event name (3b78117)

Links

3.4.3

22 May 08:25
060339a
Compare
Choose a tag to compare

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

TypeError: Cannot convert object to primitive value
       at Socket.emit (node:events:507:25)
       at .../node_modules/socket.io/lib/socket.js:531:14

Please upgrade as soon as possible.

Bug Fixes

  • check the format of the event name (2dc3c92)

Links

4.2.2

19 Jan 09:50
28dd668
Compare
Choose a tag to compare

Bug Fixes

  • calling destroy() should clear all internal state (22c42e3)
  • do not modify the input packet upon encoding (ae8dd88)

Links

3.4.2

15 Nov 09:28
4b3c191
Compare
Choose a tag to compare

Bug Fixes

  • check the format of the index of each attachment (04d23ce)

Links

3.3.3

15 Nov 09:26
cd11e38
Compare
Choose a tag to compare

Bug Fixes

  • check the format of the index of each attachment (fb21e42)

Links

4.2.1

27 Jun 13:47
5a2ccff
Compare
Choose a tag to compare

Bug Fixes

  • check the format of the index of each attachment (b5d0cb7)

Links

4.0.5

27 Jun 13:55
f3329eb
Compare
Choose a tag to compare

Bug Fixes

  • check the format of the index of each attachment (b559f05)

Links

4.2.0

17 Apr 22:36
c7514b5
Compare
Choose a tag to compare

Features

  • allow the usage of custom replacer and reviver (#112) (b08bc1a)

Links