It looks like the package-lock points to using a JFrog registry. I think you should re-install to go to the public registry.npmjs.org rather than box.jfrog.io

Done. Thanks for the callout, @jacobrasmuson!

Many libraries that use nodevault are affected by the CVE-2025-15284 vulnerability.
Is there anything else missing for the merge please ?

I think this PR can also include the changes from #269, which fixes issue #268

Many libraries that use nodevault are affected by the CVE-2025-15284 vulnerability. Is there anything else missing for the merge please ?

+1, is there anything more to perform on the PR ?

Hello,

Anybody to review and merged this 8.2 score CVE fix ?

@aviadhahami can you help please ?

Is anyone able to review this PR to fix the still existing CVE? Some other npm modules depend on node-vault and are blocked by this unresolved security issue. @aviadhahami maybe you can help us ?