Open shivamsharma2710 opened 1 year ago
Socket.IO Library has two vulnerabilities which are coming out from the internal OkHttp dependency. I've used the latest socket.io v2.1.0 which is using very old version 3.12.12 of OkHttp.
Following are the vulnerabilities:
Improper Certificate Validation
Information Exposure
Please give an estimate on when you're planning to fix these vulnerabilities?
PFA the complete vulnerability report,
@darrachequesne Please give an ETA when will be new release coming out with this fix?
Socket.IO Library has two vulnerabilities which are coming out from the internal OkHttp dependency. I've used the latest socket.io v2.1.0 which is using very old version 3.12.12 of OkHttp.
Following are the vulnerabilities:
Improper Certificate Validation
Information Exposure
Please give an estimate on when you're planning to fix these vulnerabilities?
PFA the complete vulnerability report,