Skip to content

Commit

Permalink
[wasm/test] update packages versions (#23008)
Browse files Browse the repository at this point in the history
### Description

Upgrade packages version to resolve the following dependabot alerts:
- https://github.com/microsoft/onnxruntime/security/dependabot/269
- https://github.com/microsoft/onnxruntime/security/dependabot/268
- https://github.com/microsoft/onnxruntime/security/dependabot/275
- https://github.com/microsoft/onnxruntime/security/dependabot/306



```
# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - GHSA-grv7-fg5c-xmjg
fix available via `npm audit fix`
node_modules/braces

cookie  <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - GHSA-pxg6-pf52-xh8x
fix available via `npm audit fix`
node_modules/cookie
  engine.io  0.7.8 - 0.7.9 || 1.8.0 - 6.6.1
  Depends on vulnerable versions of cookie
  Depends on vulnerable versions of ws
  node_modules/engine.io
    socket.io  1.6.0 - 4.7.5
    Depends on vulnerable versions of engine.io
    node_modules/socket.io


ws  8.0.0 - 8.17.0
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix`
node_modules/ws
  socket.io-adapter  2.5.2 - 2.5.4
  Depends on vulnerable versions of ws
  node_modules/socket.io-adapter

6 vulnerabilities (1 low, 1 moderate, 4 high)

```
  • Loading branch information
fs-eire authored Dec 4, 2024
1 parent fdf5ffe commit d0dde4f
Showing 1 changed file with 181 additions and 119 deletions.
Loading

0 comments on commit d0dde4f

Please sign in to comment.