atomist-skills / github-auto-merge-skill

Atomist Skill to merge Pull Requests on GitHub
Apache License 2.0
0 stars 0 forks source link

Fix ansi-regex > 6.0.1 #301

Closed atomist[bot] closed 3 years ago

atomist[bot] commented 3 years ago

This pull request fixes security vulnerabilities open on f55693a but 2 moderate vulnerabilities remain open and need manual review.

npm audit fix updated the following npm dependencies:


Fixed vulnerabilities

Following security vulnerability is fixed:

ansi-regex

Inefficient Regular Expression Complexity in chalk/ansi-regex moderate · >=6.0.0 <6.0.1 · CVE-2021-3807 · automatic fix available

ansi-regex@6.0.0 · 1 vulnerable path
  • @atomist/skill > strip-ansi > ansi-regex

  • Open vulnerabilities

    Following security vulnerabilities remain open and need manual review:

    ansi-regex

    Inefficient Regular Expression Complexity in chalk/ansi-regex moderate · >2.1.1 <5.0.1 · CVE-2021-3807 · automatic fix available

    ansi-regex@3.0.0 · 4 vulnerable paths
  • @atomist/skill > @graphql-codegen/cli > listr-update-renderer > log-update > wrap-ansi > string-width > strip-ansi > ansi-regex
  • @atomist/skill > @graphql-codegen/cli > listr-update-renderer > log-update > wrap-ansi > strip-ansi > ansi-regex
  • @atomist/skill > @graphql-codegen/cli > listr > listr-update-renderer > log-update > wrap-ansi > string-width > strip-ansi > ansi-regex
  • @atomist/skill > @graphql-codegen/cli > listr > listr-update-renderer > log-update > wrap-ansi > strip-ansi > ansi-regex
  • Inefficient Regular Expression Complexity in chalk/ansi-regex moderate · >=6.0.0 <6.0.1 · CVE-2021-3807 · automatic fix available

    ansi-regex@6.0.0 · 1 vulnerable path
  • @atomist/skill > strip-ansi > ansi-regex

  • File changed:


    atomist/npm-vulnerability-scanner-skill · Configure

    atomist[bot] commented 3 years ago

    Pull request auto merged: