Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Vulnerability in NPM CLI #4346

Closed
kcak11 opened this issue Jan 29, 2022 · 1 comment
Closed

Security Vulnerability in NPM CLI #4346

kcak11 opened this issue Jan 29, 2022 · 1 comment

Comments

@kcak11
Copy link

kcak11 commented Jan 29, 2022

Noticing a security vulnerability [CVE-2021-3807] when scanning the "npm" package with JFrog Xray as below:

The package cli-table3 and one of its dependency ansi-regex need to be bumped up in order to fix this issue.

Full Dependency Tree:

test-app@1.0.0
└─┬ npm@8.3.1
  └─┬ cli-table3@0.6.0
    └─┬ string-width@4.2.2
      └─┬ strip-ansi@6.0.0
        └── ansi-regex@5.0.0 

This vulnerability is reported with a "High Severity".

The vulnerability is fixed with ansi-regex@6.0.1

Please advise.

Thanks in advance.

(Also see: nodejs/node#41039)

@WikiRik
Copy link

WikiRik commented Jan 30, 2022

Duplicate of #3785

@ljharb ljharb closed this as completed Jan 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants