Known critical severity security vulnerability detected in mariadb

[mjcampagna]

I received this notice from Github:

Known critical severity security vulnerability detected in mariadb <= 1.0.2 defined in package-lock.json.

[knoxcard]

https://www.cvedetails.com/vulnerability-list/vendor_id-12010/Mariadb.html

[rusher]

"mariadb" package name was previously used for other projects totally different from MariaDB, and blocked by npm. Package name was reserved by npm to avoid any malicious use.
1.0.2 correspond to one of those npm blocked release.

Ffor now, i'm in contact with npm support to know if those can totally be removed.

[knoxcard]

close ticket?

[rusher]

closing ticket, but this will be followed here