[DepShield] (CVSS 7.5) Vulnerability due to usage of socket.io-parser:3.3.2

[sonatype-depshield[bot]]

Vulnerabilities

DepShield reports that this application's usage of socket.io-parser:3.3.2 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2020-36049] socket.io-parser before 3.4.1 allows attackers to cause a denial of service (mem...

---

Occurrences

socket.io-parser:3.3.2 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5         └─ browser-sync:2.27.4               └─ browser-sync-ui:2.27.4                     └─ socket.io-client:2.4.0                           └─ socket.io-parser:3.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[SethFalco]

Just closing all vulnerability issues except one, since ultimately the issue lies in resume-cli.