Daniel (dB.) Doubrovkine comments

Results 3350 comments of


                                            Daniel (dB.) Doubrovkine

[DISCUSS] Remove dependencies on o.o.client:opensearch-java

I think the proposal is spot on. If the SDK itself doesn't need a client, then a 3-liner in the docs that says "pick a client, add a dependency, instantiate...

[PROPOSAL - IN PROC Support] Run a process within the same JVM

So this just calls into a `main`, but has all the problems of JAR hells and such, or are there any other isolation benefits?

[Discuss] Method to determine if REST Request originates from an extension and, if so, which

I think that on installation extension gets a blob encrypted with a server key that contains its public key, then signs all its requests with its public key that the...

CVE-2023-26115 (High) detected in word-wrap-1.2.3.tgz

Catch All Triage - [1](https://github.com/dblock) [2](https://github.com/krisfreedain) [3](https://github.com/gkamat) [4](https://github.com/andrross) [5](https://github.com/getsaurabh02)

CVE-2023-28155 (Medium) detected in request-2.88.2.tgz

[Triage -- attendees [1](https://github.com/dblock), [2](https://github.com/peternied), [3](https://github.com/reta), [4](https://github.com/krisfreedain), [5](https://github.com/Getsaurabh02), [6](https://github.com/gkamat), [7](https://github.com/scrawfor99)] @kkhatua Looks like a medium security vuln, care to take a look?

CVE-2022-25883 (High) detected in semver-6.3.0.tgz, semver-5.7.1.tgz

Catch All Triage - [1](https://github.com/dblock) [2](https://github.com/krisfreedain) [3](https://github.com/gkamat) [4](https://github.com/andrross) [5](https://github.com/getsaurabh02)

CVE-2024-24828 (High) detected in pkg-4.5.1.tgz

Catch All Triage - [1](https://github.com/dblock) [2](https://github.com/krisfreedain) [3](https://github.com/gkamat) [4](https://github.com/andrross) [5](https://github.com/getsaurabh02)

CVE-2023-26136 (Critical) detected in tough-cookie-2.5.0.tgz

Catch All Triage - [1](https://github.com/dblock) [2](https://github.com/krisfreedain) [3](https://github.com/gkamat) [4](https://github.com/andrross) [5](https://github.com/getsaurabh02)

Bump json5 from 1.0.1 to 1.0.2

Can this be merged @kkhatua? [Catch All Triage, attendees [1](https://github.com/dblock), [2](https://github.com/reta), [3](https://github.com/lukas-vlcek/), [4](https://github.com/rafaelma), [5](https://github.com/krisfreedain), [6](https://github.com/gargrajat), [7](https://github.com/andrross)]