[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-ENGINEIO-3136336	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: pm2

The new version differs by 69 commits.

• 56ee2cd pm2@4.4.0
• b73c61a bump CHANGELOG.md
• caca206 psh
• 593b43c various fixes for N14
• 42a10f4 bump @ pm2/js-api + mocharc.yml -> mocharc.js
• e41282d fixes for node 14 + shelljs
• a38b6ed bump pkg
• c667244 add node 14 to travis
• 6f704e6 Merge branch 'master' into development
• 5dfb667 pm2@4.3.1
• 9d763ed cli-table-redemption -> cli-tableau
• 3980bff bump cli-table-redemption
• 9ee8a0f pm2@4.3.0
• 956afe7 pm2@4.3.0-beta.1
• 851c44c update changelog
• 03d0b28 Merge pull request #4662 from Timic3/fix/common-module-import
• d8a6d38 bump pm2-deploy
• 4d1aedf throttle cron test
• 8fae340 bump vizion
• b097dc2 pkg.json version bump
• 7a5da59 drop date-fns
• 195eb6e drop lodash lib
• 526756d 4.3.0
• 7323438 Add .cjs (common JS) as a viable extension

See the full diff

Package name: socket.io

The new version differs by 13 commits.

• baa6804 chore(release): 2.5.0
• f223178 fix: prevent the socket from joining a room after disconnection
• 226cc16 fix: only set 'connected' to true after middleware execution
• 05e1278 fix: fix race condition in dynamic namespaces
• 22d4bdf fix: ignore packet received after disconnection
• dfded53 chore: update engine.io version to 3.6.0
• e6b8697 chore(release): 2.4.1
• a169050 revert: fix(security): do not allow all origins by default
• 873fdc5 chore(release): 2.4.0
• f78a575 fix(security): do not allow all origins by default
• d33a619 fix: properly overwrite the query sent in the handshake
• 3951a79 chore: bump engine.io version
• 6fa026f ci: migrate to GitHub Actions

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS) 🦉 Regular Expression Denial of Service (ReDoS)