[Snyk] Fix for 1 vulnerabilities

[enterstudio]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: engine.io

The new version differs by 115 commits.

• b3f3590 [chore] Release 3.1.5
• 0d4e79e [chore] Bump dependencies (Require password to access Theia in browser? c9/core#549)
• ea318b8 [chore] Bump accepts to version 1.3.4 (Connect to the IDE from a subdomain? c9/core#548)
• d7aaf2b [docs] Update test command in README (Bump ws from 1.0.1 to 7.2.0 c9/core#547)
• c107ffe [chore] Bump uws to version 9.14.0 (Bump mime from 1.2.11 to 2.4.4 c9/core#545)
• 8d0ce5f [refactor] Add some checks to prevent usage of undefined properties (Can i integrate cloud9 ace editor separately c9/core#540)
• 1a685c0 [chore] Release 3.1.4
• b3f1d35 [chore] Bump ws to version 3.3.1 (Bump qs from 0.6.6 to 6.9.0 c9/core#543)
• 3ee803a [chore] Release 3.1.3
• 49362ab [fix] Fix undefined remoteAddress when using uws (Full Java support? c9/core#533)
• 3c77780 [chore] Bump debug to version 2.6.9 (hide toolbar c9/core#532)
• bf24359 [chore] Release 3.1.2
• a8ff89c [chore] Release 3.1.1
• e0d720c [fix] Check whether 'Origin' header has invalid characters (Error creating TMUX session: Cannot read property 'on' of undefined c9/core#531)
• 38d639a [fix] Use explicit require of wsEngine (What does the future Cloud9 license look like?  c9/core#523)
• f9d3f06 [docs] Fix wsEngine default value in README (PHP formatter not working c9/core#526)
• fd20b91 [test] Use npm scripts instead of gulp (Failed to install SDK in Mac OS 10.14.3 c9/core#530)
• 7f63d38 [fix] Fix undeterministic error in polling buffer processing (Self hosted --collab share error c9/core#529)
• 3dcc2d5 [fix] Use workaround for setEncoding bug in node 0.10+ (c9 cli command to download files c9/core#527)
• e76e035 [fix] Fix null payload when aborting connection (c9 open integration with git c9/core#503)
• 935b155 [chore] Release 3.1.0
• 82ed65f [test] Add test for maxHttpBufferSize option with websocket (Losing sync between filesystem and IDE c9/core#499)
• 519fb8d [chore] Bump uws to version 0.14.4 ( do not load folders and terminal c9/core#501)
• 7edb34e [chore] Bump dependencies (Inputs text of c9.io/login are inactived or blocked from 3 days ago c9/core#500)

See the full diff

Package name: engine.io-client

The new version differs by 190 commits.

• 0071fdf [chore] Release 3.1.5
• 64ce480 fix: use try/catch when setting xhr.responseType (#592)
• 3039017 [chore] Bump debug to version 3.1.0
• 90f4d17 [chore] Release 3.1.4
• 7fab005 [chore] Bump ws to version 3.3.1 (#587)
• 4558b25 [chore] Release 3.1.3
• a28776e [refactor] Update entry point in webpack configuration (#586)
• 42501c6 [revert] [refactor] Remove usuless indexof dependency (#582)
• 8ce2432 [chore] Bump xmlhttprequest-ssl to version 1.5.4 (#585)
• 4a551a1 [chore] Bump debug to version 2.6.9 (#584)
• d8fdf9b [refactor] Remove useless entry point (#583)
• 6043c49 [refactor] Remove usuless indexof dependency (#582)
• 5d29c1c [test] Remove IE6 and IE7 tests (#581)
• 1cbab34 [chore] Release 3.1.2
• 0b26bc3 [fix] Remove parsejson dependency (#580)
• b949abc [chore] Release 3.1.1
• 11f3fdd [test] Launch browser tests on localhost by default (#571)
• 753c180 [chore] Unpin debug version (#568)
• fce140a [chore] Release 3.1.0
• 32fe4e5 [chore] Bump engine.io-parser to version 2.1.1 (#566)
• be73a9c [chore] Pin debug to version 2.6.4 (#567)
• 7aad0d6 [chore] Bump engine.io-parser to version 2.1.0 (#565)
• cfb2775 [chore] Bump ws to version 2.3.1 (#564)
• f7be578 [chore] Bump debug to version 2.6.4 (#563)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)