istanbuljs / nyc

the Istanbul command line interface

Home Page:https://istanbul.js.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ansi-regex@5.0.0 Vulnerability within nyc@15.1.0

gamboaa opened this issue · comments

nyc has the following dependency tree

nyc@15.1.0
└─┬ yargs@15.4.1
└─┬ cliui@6.0.0
└─┬ strip-ansi@6.0.0
└── ansi-regex@5.0.0

ansi-regex@5.0.0 has a vulnerability

Classname:
CVE-2021-3807
System output:
{{

{ "message": "cvssV3: HIGH, score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)" }
}}