# npm audit report

parseuri  <2.0.0
Severity: moderate
parse-uri Regular expression Denial of Service (ReDoS) - https://github.com/advisories/GHSA-6fx8-h7jm-663j
fix available via `npm audit fix`
node_modules/parseuri
  engine.io-client  0.7.0 || 0.7.8 - 0.7.9 || 1.0.2 - 6.1.1
  Depends on vulnerable versions of parseuri
  Depends on vulnerable versions of ws
  node_modules/engine.io-client
    socket.io-client  1.0.0-pre - 4.4.1
    Depends on vulnerable versions of engine.io-client
    Depends on vulnerable versions of parseuri
    Depends on vulnerable versions of socket.io-parser
    node_modules/socket.io-client

socket.io-parser  4.0.0 - 4.2.5
Severity: high
Insufficient validation when decoding a Socket.IO packet - https://github.com/advisories/GHSA-cqmj-92xf-r6r9
socket.io allows an unbounded number of binary attachments - https://github.com/advisories/GHSA-677m-j7p3-52f9
fix available via `npm audit fix`
node_modules/socket.io-parser

ws  7.0.0 - 7.5.9
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - https://github.com/advisories/GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix`
node_modules/engine.io-client/node_modules/ws

5 vulnerabilities (1 moderate, 4 high)

To address all issues, run:
  npm audit fix
