chalk / wrap-ansi

Wordwrap a string with ANSI escape codes
MIT License
120 stars 25 forks source link

Wrap-Ansi using vulnerable packages #52

Closed Hunter343 closed 1 year ago

Hunter343 commented 1 year ago

wrap-ansi is using packages that are vulnerable to Inefficient Regular Expression Complexity (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807). This vulnerability lives in ansi-regex 5.0.1 and has been resolved in ansi-regex 6.0.1.

wrap-ansi needs to update the dependencies string-width and strip-ansi to their current version to resolve this vulnerability