Critical vulnerability: Insufficient validation when decoding a Socket.IO packet

Hello,

We are currently facing a critical vulnerability in our project that depends on karma.
https://github.com/advisories/GHSA-qm95-pgcg-qqfq

Steps to reproduce:
`npm install`
`npm audit`

Console message:
```
├─ socket.io-parser: 4.0.4
│ ├─ Issue: Insufficient validation when decoding a Socket.IO packet
│ ├─ URL: https://github.com/advisories/GHSA-qm95-pgcg-qqfq
│ ├─ Severity: critical
│ ├─ Vulnerable Versions:
│ ├─ Patched Versions: >=4.0.5
│ ├─ Via: karma, karma-htmlfile-reporter, karma-jasmine-html-reporter
│ └─ Recommendation: Upgrade to version 4.0.5 or later
```

Thank you in advance.

Start by inspecting the repository's dependency declarations, then run the reported npm install and npm audit commands. Confirm that the Socket.IO parser dependency is at least 4.0.5 and that the critical audit finding is no longer reported.

Written by the indexing model from the issue text.