ReDoS Vulnerabilities Fixes.

[pabloherre]

Vulnerabilities fixes

There are security issues with this package that is affecting the following libraries among others:

• "socket.io-client": "^2.5.0"
• "engine.io-client": "3.5.4"

If you can't upgrade those libraries like me, I have forked this "parseuri" and can be replaced with this new one.

How to fix?

Just add this into your pacakge json file.

"overrides": {
    "socket.io-client": {
      "parseuri": "https://registry.npmjs.org/@pabloherre/parseuri/-/parseuri-0.0.10.tgz"
    },
    "engine.io-client": {
      "parseuri": "https://registry.npmjs.org/@pabloherre/parseuri/-/parseuri-0.0.10.tgz"
    }
  }

Info:

Replace "socket.io-client" with the library that depends on parseuri

Example: