[Snyk] Fix for 1 vulnerabilities

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![critical severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/c.png "critical severity") | **776/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 9.8 | Improper Input Validation
[SNYK-JS-SOCKETIOPARSER-3091012](https://snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-3091012) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: karma

The new version differs by 250 commits.

3653caf chore(release): 6.0.0 [skip ci]
04a811d fix(ci): abandon browserstack tests for Safari and IE (#3615)
4bf90f7 feat(client): update banner with connection, test status, ping times (#3611)
68c4a3a chore(test): run client tests without grunt wrapper (#3604)
fec972f fix(middleware): catch errors when loading a module (#3605)
3fca456 fix(server): clean up close-server logic (#3607)
1c9c2de fix(test): mark all second connections reconnects (#3598)
87f7e5e chore(license): Update copyright notice to 2020 [ci skip] (#3568)
e6b045f chore(deps): npm audit fix the package-lock.json (#3603)
3c649fa chore(build): remove obsolete Grunt tasks (#3602)
8997b74 fix(test): clear up clearContext (#3597)
fe0e24a chore(build): unify client bundling scripts (#3600)
1a65bf1 feat(server): remove deprecated static methods (#3595)
fb76ed6 chore(test): remove usage of deprecated buffer API (#3596)
35a5842 feat(server): print stack of unhandledrejections (#3593)
4a8178f fix(client): do not reset karmaNavigating in unload handler (#3591)
603bbc0 feat(cli): error out on unexpected options or parameters (#3589)
7a3bd55 feat: remove support for running dart code in the browser (#3592)
1b9e1de fix(deps): bump socket-io to v3 (#3586)
3fed0bc fix(cve): update yargs to 16.1.1 to fix cve-2020-7774 in y18n (#3578)
f819fa8 fix(cve): update ua-parser-js to 0.7.23 to fix CVE-2020-7793 (#3584)
05dc288 fix(context): do not error when karma is navigating (#3565)
e5086fc docs: clarify `browser_complete` vs `run_complete`
ead31cd chore(release): 5.2.3 [skip ci]

See the full diff

Package name: socket.io-client

The new version differs by 104 commits.

b7e07ba chore(release): 3.0.0
ffa2804 chore(release): 3.0.0-rc4
0939395 feat: emit an Error object upon middleware error
969debe refactor: rework of the Manager events
a9127ce chore(release): 3.0.0-rc3
13e1db7 refactor: rename ERROR to CONNECT_ERROR
55f464f feat: add support for catch-all listeners
71d6048 feat: add bundle with msgpack parser
f3cbe98 refactor: additional typings
7ddad2c feat: add volatile events
b600e78 chore(release): 3.0.0-rc2
1789094 feat: move binary detection back to the parser
c7998d5 refactor: add Manager and Socket typings
2c7c230 chore: publish the wrapper.mjs file
a66473f chore: use socketio GitHub organization
946a9f0 chore: fix test script
a838ff1 chore(release): 3.0.0-rc1
b68f816 chore: bump debug
cbabb03 feat: add ES6 module export
e826992 refactor: remove the 'connect_timeout' event
b60e909 refactor: remove the 'connecting' event
6494f61 feat: throw upon reserved event names
132f8ec feat: split the events of the Manager and Socket
6cd2e4e refactor: remove the packetBuffer array

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/legal-aid-agency/project/a0ad42b9-20af-405e-a765-5a25fbae5482?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/legal-aid-agency/project/a0ad42b9-20af-405e-a765-5a25fbae5482?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"15088904-f823-4493-bccd-dcfa36514e33","prPublicId":"15088904-f823-4493-bccd-dcfa36514e33","dependencies":[{"name":"karma","from":"2.0.0","to":"6.0.0"},{"name":"socket.io-client","from":"1.7.4","to":"3.0.0"}],"packageManager":"npm","projectPublicId":"a0ad42b9-20af-405e-a765-5a25fbae5482","projectUrl":"https://app.snyk.io/org/legal-aid-agency/project/a0ad42b9-20af-405e-a765-5a25fbae5482?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-SOCKETIOPARSER-3091012"],"upgrade":["SNYK-JS-SOCKETIOPARSER-3091012"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[776]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Improper Input Validation](https://learn.snyk.io/lessons/sql-injection/javascript//?loc=fix-pr)

ministryofjustice / cla_frontend

[Snyk] Fix for 1 vulnerabilities #851

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.