David Handermann created NIFI-11589:
---------------------------------------
Summary: Upgrade socket-io.parser to 4.2.3
Key: NIFI-11589
URL: https://issues.apache.org/jira/browse/NIFI-11589
Project: Apache NiFi
Issue Type: Improvement
Components: NiFi Registry
Reporter: David Handermann
Assignee: David Handermann
The [socket.io-parser library version
4.2.3|https://github.com/socketio/socket.io-parser/releases/tag/4.2.3] corrects
a vulnerability in the library related to crafted HTTP requests. The
socket.io-parser library is a transitive dependency of the karma testing
library, so the vulnerability does not impact runtime behavior, but
socket.io-parser should be upgraded.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)