SpreadJS Collaboration Server external dependency vulnerability in socket.io-parser

An external dependency of SpreadJS Collaboration Server, socket.io-parser, was found to have a security vulnerability.

CVE: https://github.com/advisories/GHSA-2m8v-j782-fhvr

Remediation

Upgrade socket.io-parser@4.2.4 to the patched version: socket.io-parser@4.2.7 or later

Recommended upgrade method:

Delete the existing package-lock.json and run npm install again to automatically upgrade socket-io.parser to version 4.2.7 or later.

Verify the remediation with:

npm ls socket.io-parser
npm audit

The expected result is socket.io-parser@4.2.7 or later, with both vulnerability warnings removed.

Note: Since this is an external dependency issue, no update to any SpreadJS library is needed.