Overview
This issue is being raised to highlight several security vulnerabilities within the "marklogic" npm package. These issues have been identified as potential risks to end-users. Multiple PRs are already created targeting these vulnerabilities, but nu action is taken to merge them.
Impact
Because this package is a public npm module, these vulnerabilities could potentially be exploited by malicious actors in downstream applications. Security scanners are currently flagging these issues for users of the library.
Request
Could the maintainers please review and merge the open security related Pull Requests, or provide an updated timeline for when security patches will be integrated?
Overview
This issue is being raised to highlight several security vulnerabilities within the "marklogic" npm package. These issues have been identified as potential risks to end-users. Multiple PRs are already created targeting these vulnerabilities, but nu action is taken to merge them.
Impact
Because this package is a public npm module, these vulnerabilities could potentially be exploited by malicious actors in downstream applications. Security scanners are currently flagging these issues for users of the library.
Request
Could the maintainers please review and merge the open security related Pull Requests, or provide an updated timeline for when security patches will be integrated?