sockjs/sockjs-node — pull request #146 by Zarel (2013-12-29 20:52:17+00:00)
Title: Upgrade Faye; older versions have zero-day DoS vulnerability

Hi, many versions of Faye older than 0.7.2 (including 0.7.0 used in SockJS) have a DoS vulnerability that's being actively exploited to take down SockJS servers.

I've worked with @jcoglan to fix it in the latest version of Faye, and since SockJS servers are already being attacked, I'd consider it highly urgent to update and release a new version of SockJS ASAP.