-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Unknown
-
None
-
Affects Version/s: None
-
Component/s: Dependencies
Use Case
As a... Node developer
I want... to use latest fast-xml-parser
So that... we can avoid a security issue in the current version of fast-xml-parser we are using
User Experience
- No changes in behavior.
Dependencies
- Updating (if possible) the AWS SDK dependency to pull in the latest version of fast-xml-parser
- Alerts: https://github.com/mongodb/node-mongodb-native/security/dependabot?q=is%3Aopen+manifest%3Apackage-lock.json+package%3Afast-xml-parser
Risks/Unknowns
- Update may not be possible,
or may break the driverNote: update cannot break the driver as it's not a production dependency.
Acceptance Criteria
Implementation Requirements
- package lock has the latest fast-xml-parser version
Testing Requirements
- all tests are pasing
Documentation Requirements
- None
Follow Up Requirements
- Q: Do we need to document that these vulnerabilities are addressed? A: No. Dev dependency vulnerabilities do not pose risk to users of the driver.
- Verify that https://github.com/mongodb/node-mongodb-native/security/dependabot?q=is%3Aopen+manifest%3Apackage-lock.json+package%3Afast-xml-parser is clear