SpreadJS Collaboration Server external dependency vulnerability in engine.io through socket.io

An external dependency of SpreadJS Collaboration Server, engine.io, was found to have a security vulnerability.

CVE: https://github.com/advisories/GHSA-2gc4-cqfq-p2gv 

Remediation

Upgrade engine.ioto the patched version: engine.io@6.6.10 or later

Recommended upgrade method:

Delete the existing package-lock.json and run npm install again to automatically upgrade engine.io to version 6.6.10

Verify the remediation with:

The expected result is engine.io@6.6.10 or later, with vulnerability warnings removed.

Note: Since this is an external dependency issue, no update to any SpreadJS library is needed.