[Snyk] Security upgrade eventsource from 0.2.3 to 2.0.2

[JaredRiceSr]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-EVENTSOURCE-2823375	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: eventsource

The new version differs by 113 commits.

• 774ed10 2.0.2
• 53356b5 chore: rebuild polyfill
• 7ed08fe docs: update HISTORY for v2.0.2
• dc89cfd refactor: reuse unsafe header regex pattern
• 10ee0c4 fix: strip sensitive headers on redirect to different origin
• a95ba90 2.0.1
• 9321d5c Fix: browser compatibility Merge pull request #268 from ajinkyarajput/ajinkyarajput-url-import
• a759bc5 Update HISTORY.md
• f52ed50 Standard: Make URL is global variable
• 9f28bd6 Make it again browser compatible
• 4579961 2.0.0
• 1f2357a Rebuild polyfill
• 751aedc Merge pull request #256 from joeybaker/version2
• 9ce9f65 Doc update history.md for v2.0.0
• fa900cc Merge pull request #249 from AlexHladin/remove-original-dependency
• 1b722b8 Remove the original dependency and switch it to URL module
• adc6e49 Merge pull request #239 from pfreixes/avoid-mutliple-buffer-allocation
• ef3a4ee Less aggressive timeout
• bab41d9 Modify test timeout that checks performance of the chunk parser
• dbd7d13 Fix tests and use Buffer.alloc
• 99714d5 Add description about 256KB rationale
• a9edd80 Change the threshold for 256KB
• 86dc983 Preallocate buffer size when reading data
• 82e0343 Merge pull request #150 from HonkingGoose/patch-2

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.