bump `cliui` to resolve `ansi-regex` ReDoS

sarbbottam / eslint-find-rules

Find built-in ESLint rules you don't have in your custom config

http://npm.im/eslint-find-rules

MIT License

201 stars 33 forks source link

Closed csantos1113 closed 6 months ago

csantos1113 commented 6 months ago

Could it be possible to upgrade these dependencies to resolve ReDoS vulnerability?

ljharb commented 6 months ago

Why? Most ReDOS vulnerabilities are self-attacks, meaning, not a vulnerability.

csantos1113 commented 6 months ago

I'm going to close this issue because the version of ansi-regex that is indirectly installed is safe