[2.*] xmlhttprequest-ssl vuneability

[xandros15]

When I try to fix vulnerability I got collision problem, and say I should upgrade socket.io to version 4.

I cannot do that, because that will break my application.

Is there any option that vulnerability will be fixed for version 2?

[darrachequesne]

This should be fixed now: [email protected]

Thanks for the heads-up 🙏