Snyk Code Analysis (ansi-regex) - Regular Expression Denial of Service (ReDoS) Vulnerability

ExpressGateway / express-gateway

A microservices API Gateway built on top of Express.js

https://www.express-gateway.io

Apache License 2.0

2.96k stars 344 forks source link

Open dev-script opened 1 year ago

dev-script commented 1 year ago

Issue: ansi-regex@2.1.1 Fixed In: ansi-regex@3.0.1, @4.1.1, @5.0.1, @6.0.1

Introduced through:

express-gateway@1.16.11 › superagent-logger@1.1.0 › chalk@1.1.3 › has-ansi@2.0.0 › ansi-regex@2.1.1
express-gateway@1.16.11 › superagent-logger@1.1.0 › chalk@1.1.3 › strip-ansi@3.0.1 › ansi-regex@2.1.1

Please upgrade internal package ansi-regex (v2.1.1 to v3.0.1, v4.1.1, v5.0.1, v6.0.1) of express-gateway