ws affected by a DoS when handling a request with many HTTP headers

[pranshuchittora]

Description

ws affected by a DoS when handling a request with many HTTP headers
GHSA-3h5v-q93c-6h6q

Solution

Bump WS
https://github.com/facebook/react-native/blob/main/packages/react-native/package.json#L147

Steps to reproduce

NA

React Native Version

Affected Platforms

Other (please specify)

Output of npx react-native info

NA

Stacktrace or Logs

NA

Reproducer

NA

Screenshots and Videos

No response

[github-actions]

⚠️	Add or Reformat Version Info
ℹ️	We could not find or parse the version number of React Native in your issue report. Please use the template, and report your version including major, minor, and patch numbers - e.g. 0.70.2

[github-actions]

⚠️	Missing Reproducible Example
ℹ️	We could not detect a reproducible example in your issue report. Please provide either: If your bug is UI related: a Snack If your bug is build/update related: use our Reproducer Template. A reproducer needs to be in a GitHub repository under your username.

[cortinico]

Bump WS main/packages/react-native/package.json#L147

The dependency is already using the caret:

react-native/packages/react-native/package.json

Line 147 in f7fe688

"ws": "^6.2.2",

So you will be pulling in a patched version of ws when you yarn/npm install.

Anyway, if you wish to bump the base package version, feel free to send a PR.