Mongodb-memory-server: Vulnerability Issue With bl < 2.2.1

[wu-json]

Issue

Just got a message from one of my repos about a security vulnerability with bl below version 2.2.1. It seems like this repo still uses v2.2.0. Would be great if this could be updated.

[hasezoey]

package bl is not installed directly in one of the packages here, so it will depend on when the other packages are upgraded

[wu-json]

Ah understood - thank you!

[hasezoey]

348 got merged, next version will include it

[nodkz]

Please let us know when this PR be accepted https://github.com/mongodb/node-mongodb-native/pull/2536 and the new package mongodb be published.

Only after that, we can eliminate this warning.

[kylepeeler]

Anything I (first-time contributor 😄) can do to help get this moved along? Merging the above and this one would help to resolve a high npm vulnerability currently blocking CI on another project of mine

[hasezoey]

@kylepeeler the fix on this package already got applied #348, but because this package uses yarn, its only yarn.lock which got updated, otherwise we need to wait for mongodb to merge the mentioned PR and release it

[kylepeeler]

https://github.com/mongodb/node-mongodb-native/pull/2536 seems to have been merged and the issue resolved, should we close this issue?

[github-actions[bot]]

:tada: This issue has been resolved in version 6.7.3 :tada:

The release is available on:

• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot :package::rocket: