Exponential ReDoS (CVE-2021-23424) #19

b-c-ds · 2021-05-07T15:06:26Z

Posting here as unable to contact maintainer.

Doyensec Vulnerability Advisory

Regular Expression Denial of Service (ReDoS) in ansi-html
Affected Product: ansi-html <= 0.0.7
Vendor: https://github.com/Tjatse
Severity: Low
Vulnerability Class: Denial of Service
Status: Open
Author(s): Ben Caller (Doyensec)

SUMMARY

The npm package ansi-html uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS).
If an attacker provides a malicious string, ansi-html will get stuck processing the input for an extremely long time.

TECHNICAL DESCRIPTION

The vulnerable regular expression is

\033\[(\d+)*m

ansi-html/index.js

Line 62 in 99ec49e

var ret = text.replace(/\033\[(\d+)*m/g, function (match, seq) {

Due to the (\d+)* part, this regular expression has catastrophic backtracking when given a long string of digits.

The behaviour occurs as long as the digits are not followed immediately by an 'm'.

The complexity is exponential: increasing the length of the malicious string by one makes processing take about twice as long.

REPRODUCTION STEPS

In nodejs, run:

require('ansi-html')('\x1b[0m\x1b[' + '0'.repeat(35))

Notice that node hangs at 100% CPU. Increasing the number of spaces increases the processing time.

On my laptop that would take three minutes to complete, whereas

require('ansi-html')('\x1b[0m\x1b[' + '0'.repeat(53))

would take just over one year to complete.

REMEDIATION

Remove the asterisk from the regular expression on line 62.

=

Doyensec (www.doyensec.com) is an independent security research and development company focused on vulnerability discovery and remediation. We work at the intersection of software development and offensive engineering to help companies craft secure code.

Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting
it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided
that due credit is given. The information in the advisory is believed to be accurate at the time of publishing based on
currently available information, and it is provided as-is, as a free service to the community by Doyensec LLC. There are
no warranties with regard to this information, and Doyensec LLC does not accept any liability for any direct, indirect, or
consequential loss or damage arising from use of, or reliance on, this information.

The text was updated successfully, but these errors were encountered:

krishnaUIDev · 2021-07-09T05:03:57Z

Looks like this package is not accepting new merge requests and not in maintenance ☹️

SymbioticKilla · 2021-08-23T07:19:33Z

@Tjatse @glenjamin @danfuzz Any chance to fix this issue?

glenjamin · 2021-08-23T07:21:51Z

I am not a maintainer of this project.

danfuzz · 2021-08-23T16:52:55Z

Me neither; sorry!

graniczny · 2021-08-25T11:13:06Z

+1 any chance of fixing it @Tjatse ?

mahdyar · 2021-09-05T09:49:33Z

Okay, I published the fixed version to npm. It's called ansi-html-community.
The repo: @mahdyar/ansi-html-community.

This fixes the vulnerability reported in [CVE-2021-23424][CVE], by replacing the ansi-html dependency with a fork of the project that has the [suggested fix][ansi-html-fix] and resolves [webpack-contrib#412][412] [CVE]: https://nvd.nist.gov/vuln/detail/CVE-2021-23424 [ansi-html-fix]: Tjatse/ansi-html#19 [412]: webpack-contrib#412

This fixes the vulnerability reported in [CVE-2021-23424][CVE] by replacing the ansi-html dependency with a fork of the project that has the [suggested fix][ansi-html-fix] and resolves [webpack-contrib#412][412] [CVE]: https://nvd.nist.gov/vuln/detail/CVE-2021-23424 [ansi-html-fix]: Tjatse/ansi-html#19 [412]: webpack-contrib#412

This is a fix for the vulnerability reported in [CVE-2021-23424][CVE] by replacing the ansi-html dependency with a fork of the project that has the [suggested fix][ansi-html-fix] and resolves [webpack-contrib#412][412] [CVE]: https://nvd.nist.gov/vuln/detail/CVE-2021-23424 [ansi-html-fix]: Tjatse/ansi-html#19 [412]: webpack-contrib#412

CoryDanielson · 2021-10-06T17:22:31Z

ty @mahdyar

How to fix, if you're using yarn

If you're using yarn and this package is not a direct dependency of your repo, you can resolve this issue with Selective Dependency Resolutions

Install ansi-html-community

yarn add ansi-html-community@0.0.8

Add the resolution to your package.json

This instructs yarn to install ansi-html-community@0.0.8 instead of ansi-html.

"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41",
}

Confirmation

After removing and re-installing node_modules (rm -rf node_modules; yarn) you can confirm that your ansi-html dependency is actually ansi-html-community

❯ cat node_modules/ansi-html/package.json
{
  "name": "ansi-html-community",
  "version": "0.0.8",
  "description": "An elegant lib that converts the chalked (ANSI) text to HTML. (Community)",
  "main": "index.js",
  "scripts": {
    "test": "./node_modules/.bin/mocha -R spec -t 5000"
  },
  "bin": {
    "ansi-html": "./bin/ansi-html"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/mahdyar/ansi-html-community.git"
  },
/* ... truncated ... */

cmacdonnacha · 2021-10-07T11:08:11Z

ty @mahdyar

If you're using yarn and this package is not a direct dependency of your repo, you can resolve this issue with Selective Dependency Resolutions

Install ansi-html-community

yarn add ansi-html-community@0.0.8

Add the resolution to your package.json

This instructs yarn to install ansi-html-community@0.0.8 instead of ansi-html.
"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41",
}
Confirmation

After removing and re-installing node_modules (rm -rf node_modules; yarn) you can confirm that your ansi-html dependency is actually ansi-html-community
❯ cat node_modules/ansi-html/package.json
{
  "name": "ansi-html-community",
  "version": "0.0.8",
  "description": "An elegant lib that converts the chalked (ANSI) text to HTML. (Community)",
  "main": "index.js",
  "scripts": {
    "test": "./node_modules/.bin/mocha -R spec -t 5000"
  },
  "bin": {
    "ansi-html": "./bin/ansi-html"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/mahdyar/ansi-html-community.git"
  },
/* ... truncated ... */

Anyone know how to do this with npm-force-resolutions?

Se Tjatse/ansi-html#19

CoryDanielson · 2021-10-07T15:06:42Z

@cmacdonnacha you may want to open an issue with npm-force-resolutions. I don't see anything in their docs for a resolution value that is not a version number.

https://github.com/rogeriochaves/npm-force-resolutions/issues

cmacdonnacha · 2021-10-07T21:17:35Z

@cmacdonnacha you may want to open an issue with npm-force-resolutions. I don't see anything in their docs for a resolution value that is not a version number.

https://github.com/rogeriochaves/npm-force-resolutions/issues

Thanks. It's actually CRA that uses this and they seem to have gone a but stale with releases so I think I will probably move to Vite.

…jatse/ansi-html#19 (comment)

jdehorty · 2021-10-16T00:58:45Z

Anyone know how to do this with npm-force-resolutions?

@cmacdonnacha
As it turns out, yarn is not necessary. This is how you can do it using only npm-force-resolutions:

https://stackoverflow.com/questions/69548370/how-to-override-a-nested-npm-sub-dependency-with-a-different-package-altogether/69591894#69591894

cmacdonnacha · 2021-10-18T13:29:55Z

Anyone know how to do this with npm-force-resolutions?

@cmacdonnacha As it turns out, yarn is not necessary. This is how you can do it using only npm-force-resolutions:

https://stackoverflow.com/questions/69548370/how-to-override-a-nested-npm-sub-dependency-with-a-different-package-altogether/69591894#69591894

That worked for me, thanks so much @jdehorty

ranka23 · 2021-10-26T12:31:19Z

ty @mahdyar

How to fix, if you're using yarn

If you're using yarn and this package is not a direct dependency of your repo, you can resolve this issue with Selective Dependency Resolutions

Install ansi-html-community

yarn add ansi-html-community@0.0.8

Add the resolution to your package.json

This instructs yarn to install ansi-html-community@0.0.8 instead of ansi-html.
"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41",
}
Confirmation

After removing and re-installing node_modules (rm -rf node_modules; yarn) you can confirm that your ansi-html dependency is actually ansi-html-community
❯ cat node_modules/ansi-html/package.json
{
  "name": "ansi-html-community",
  "version": "0.0.8",
  "description": "An elegant lib that converts the chalked (ANSI) text to HTML. (Community)",
  "main": "index.js",
  "scripts": {
    "test": "./node_modules/.bin/mocha -R spec -t 5000"
  },
  "bin": {
    "ansi-html": "./bin/ansi-html"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/mahdyar/ansi-html-community.git"
  },
/* ... truncated ... */

This works. However, when I run yarn audit after making these changes, I receive this error:

An unexpected error occurred: "Unexpected audit response (Missing Metadata): false".

The project compiles and running this command cat node_modules/ansi-html/package.json gives the expected output of ansi-html being inferred as ansi-html-community. But, yarn audit fails with a 400 error response from npm.

Anyone facing this issue? Any solutions?

ShanUSAC · 2021-10-29T17:57:17Z

ty @mahdyar

How to fix, if you're using yarn

If you're using yarn and this package is not a direct dependency of your repo, you can resolve this issue with Selective Dependency Resolutions

Install ansi-html-community

yarn add ansi-html-community@0.0.8

Add the resolution to your package.json

This instructs yarn to install ansi-html-community@0.0.8 instead of ansi-html.
"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41",
}
Confirmation

After removing and re-installing node_modules (rm -rf node_modules; yarn) you can confirm that your ansi-html dependency is actually ansi-html-community
❯ cat node_modules/ansi-html/package.json
{
  "name": "ansi-html-community",
  "version": "0.0.8",
  "description": "An elegant lib that converts the chalked (ANSI) text to HTML. (Community)",
  "main": "index.js",
  "scripts": {
    "test": "./node_modules/.bin/mocha -R spec -t 5000"
  },
  "bin": {
    "ansi-html": "./bin/ansi-html"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/mahdyar/ansi-html-community.git"
  },
/* ... truncated ... */

Thanks @mahdyar . This fix works and npm install works fine. However when I do "npm audit fix", I am seeing the below error.

$ npm audit fix
npm ERR! Invalid Version: https://registry.npmjs.org/ansi-html-community/-/ansi-html-community-0.0.8.tgz

Could you check what's missing?

ShanUSAC · 2021-10-29T17:58:03Z

ty @mahdyar

How to fix, if you're using yarn

If you're using yarn and this package is not a direct dependency of your repo, you can resolve this issue with Selective Dependency Resolutions

Install ansi-html-community

yarn add ansi-html-community@0.0.8

Add the resolution to your package.json

This instructs yarn to install ansi-html-community@0.0.8 instead of ansi-html.
"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41",
}
Confirmation

After removing and re-installing node_modules (rm -rf node_modules; yarn) you can confirm that your ansi-html dependency is actually ansi-html-community
❯ cat node_modules/ansi-html/package.json
{
  "name": "ansi-html-community",
  "version": "0.0.8",
  "description": "An elegant lib that converts the chalked (ANSI) text to HTML. (Community)",
  "main": "index.js",
  "scripts": {
    "test": "./node_modules/.bin/mocha -R spec -t 5000"
  },
  "bin": {
    "ansi-html": "./bin/ansi-html"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/mahdyar/ansi-html-community.git"
  },
/* ... truncated ... */
Thanks @mahdyar . This fix works and npm install works fine. However when I do "npm audit fix", I am seeing the below error.
$ npm audit fix
npm ERR! Invalid Version: https://registry.npmjs.org/ansi-html-community/-/ansi-html-community-0.0.8.tgz
Could you check what's missing?

My resolutions:

"resolutions": {
"browserslist": "4.16.5",
"dns-packet": "5.2.2",
"glob-parent": "6.0.1",
"url-parse": "1.5.2",
"path-parse": "1.0.7",
"jszip": "3.7.0",
"ansi-html": "https://registry.npmjs.org/ansi-html-community/-/ansi-html-community-0.0.8.tgz"
},

jdehorty · 2021-10-29T20:54:00Z

@ShanUSAC are you trying to use yarn or npm?

If npm follow the directions outlined here:

https://stackoverflow.com/a/69591894/12649786

Note that you will also need a preinstall entry under scripts for that to work like this:

  "scripts": {
    "preinstall": "npx npm-force-resolutions",
    "start": "react-scripts start",
    "build": "react-scripts build",
    "test": "react-scripts test --env=jsdom",
    "eject": "react-scripts eject"
  }

kpeters-cbsi · 2021-11-10T00:19:19Z

ty @mahdyar

How to fix, if you're using yarn

If you're using yarn and this package is not a direct dependency of your repo, you can resolve this issue with Selective Dependency Resolutions

Install ansi-html-community

yarn add ansi-html-community@0.0.8

Add the resolution to your package.json

This instructs yarn to install ansi-html-community@0.0.8 instead of ansi-html.
"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41",
}
Confirmation

After removing and re-installing node_modules (rm -rf node_modules; yarn) you can confirm that your ansi-html dependency is actually ansi-html-community
❯ cat node_modules/ansi-html/package.json
{
  "name": "ansi-html-community",
  "version": "0.0.8",
  "description": "An elegant lib that converts the chalked (ANSI) text to HTML. (Community)",
  "main": "index.js",
  "scripts": {
    "test": "./node_modules/.bin/mocha -R spec -t 5000"
  },
  "bin": {
    "ansi-html": "./bin/ansi-html"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/mahdyar/ansi-html-community.git"
  },
/* ... truncated ... */

I tried this with yarn in my project with two workspaces, frontend and backend. The ansi-html package is a dependency from something in the frontend workspace. I first tried adding the fix to frontend/package.json, but, while this produced no errors, cat frontend/node_modules/ansi-html/package.json still showed version 0.0.7. So I tried adding the fix to the root package.json, but after I did rm -rf node_modules frontend/node_modules backend/node_modules ; yarn I got:

➜  locust-self-service git:(fix-cve-2021-23424) ✗ rm -rf node_modules frontend/node_modules backend/node_modules ; yarn ; cat frontend/node_modules/ansi-html/package.json
➤ YN0000: ┌ Project validation
➤ YN0057: │ frontend: Resolutions field will be ignored
➤ YN0000: └ Completed
➤ YN0000: ┌ Resolution step
➤ YN0001: │ Error: ansi-html@https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz#69fbc4d6ccbe383f9736934ae34c3f8290f1bf41 isn't supported by any available resolver
    at Xc.getResolverByDescriptor (/Users/cpete0624/work/locust-self-service/.yarn/releases/yarn-3.0.2.cjs:294:5330)
    at Xc.bindDescriptor (/Users/cpete0624/work/locust-self-service/.yarn/releases/yarn-3.0.2.cjs:294:4719)
    at reduceDependency (/Users/cpete0624/work/locust-self-service/.yarn/releases/yarn-3.0.2.cjs:294:3379)
    at co.reduceHook (/Users/cpete0624/work/locust-self-service/.yarn/releases/yarn-3.0.2.cjs:295:3206)
    at p (/Users/cpete0624/work/locust-self-service/.yarn/releases/yarn-3.0.2.cjs:303:6768)
    at async Promise.all (index 65)
➤ YN0000: └ Completed
➤ YN0000: Failed with errors in 0s 192ms

kdblocher · 2021-11-16T14:49:16Z

If you are using yarn and ansi-html is only a transitive dependency, you shouldn't need to install it yourself. Just using

"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz",
}

should be enough.

kpeters-cbsi · 2021-11-16T17:17:16Z

If you are using yarn and ansi-html is only a transitive dependency, you shouldn't need to install it yourself. Just using
"resolutions": {
  "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz",
}
should be enough.

Do I put that in my root package.json or in frontend/package.json?

sauldeleon · 2021-11-18T17:23:34Z

worked like a charm. Thanks a lot @mahdyar

kdblocher · 2021-11-18T18:11:13Z

Whichever package.json is transitively referencing ansi-html. Look at the generated lockfile.

…

On Tue, Nov 16, 2021 at 11:17 AM Kit Peters ***@***.***> wrote: If you are using yarn and ansi-html is only a *transitive* dependency, you shouldn't need to install it yourself. Just using "resolutions": { "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz", } should be enough. Do I put that in my root package.json or in frontend/package.json? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#19 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABBH2RYXZ5DD4ISKLCJEYJ3UMKG2PANCNFSM44KKJJ6A> .

Pin to an exact version, 0.0.8, which I have personally verified only contains the desired change, plus package.json metadata changes and updates to README.md. (Pinning means we don't have to trust the independent GitHub user who published the fork, just the content of the patch.) One can do the following commands to download and inspect the contents of the packages themselves, as hosted on the npm package registry... - `npm pack ansi-html@0.0.7` - `npm pack ansi-html-community@0.0.8` Then extract the tarballs and compare the content. See the following for details of the fork and why it was made: - github[dot]com/Tjatse/ansi-html/issues/19 - github[dot]com/Tjatse/ansi-html/issues/19#issuecomment-913119841

Yonet · 2022-02-23T00:22:49Z

For those of you who are using npm:

How to fix, if you're using npm

Starting with npm 8.3, you can add an option to override your dependency of your dependencies by defining overrides on your root package.json.

Override ansi-html with ansi-html-community in package.json
"overrides": { "ansi-html": "https://registry.yarnpkg.com/ansi-html-community/-/ansi-html-community-0.0.8.tgz" },
Delete your package-lock.json and node modules folder
npm install
npm i

neil-gok mentioned this issue Jul 29, 2021

ReDoS Vulnerability webpack/webpack-dev-server#3576

Closed

2 tasks

b-c-ds changed the title ~~Exponential ReDoS~~ Exponential ReDoS (CVE-2021-23424) Aug 25, 2021

This was referenced Aug 31, 2021

fix: limit backtracking exposure CVE-2021-23424 #20

Merged

fix: limit backtracking exposure CVE-2021-23424 gebhardtr/ansi-html#1

Merged

mahdyar added a commit to mahdyar/ansi-html-community that referenced this issue Sep 5, 2021

fix: fix Tjatse#19

283cda2

rap2hpoutre mentioned this issue Sep 7, 2021

fix: replace ansi-html with ansi-html-community pmmmwh/react-refresh-webpack-plugin#501

Merged

pedantic79 mentioned this issue Sep 9, 2021

ReDoS Vulnerability webpack-contrib/webpack-hot-middleware#412

Closed

nttibbetts mentioned this issue Sep 9, 2021

fix: replace ansi-html with ansi-html-community to fix vulnerability webpack-contrib/webpack-hot-middleware#413

Merged

6 tasks

danmarshall mentioned this issue Sep 14, 2021

Replace ansi-html with ansi-html-community parcel-bundler/parcel#6899

Closed

3 tasks

mayank99 mentioned this issue Oct 4, 2021

chore(deps): Bump ansi-regex and replace ansi-html iTwin/iTwinUI-react#350

Merged

5 tasks

mahdyar mentioned this issue Oct 6, 2021

0.0.7 is Vulnerable #21

Closed

runska added a commit to navikt/forebygge-sykefravaer that referenced this issue Oct 7, 2021

Byttet ut ansi-html med ansi-html-community

e4caf24

Se Tjatse/ansi-html#19

GoryMoon mentioned this issue Oct 12, 2021

Replace ansi-html with ansi-hmtl-community GoryMoon/SubscriptionWhitelist#40

Closed

aruniverse added a commit to imodeljs/create-react-app that referenced this issue Oct 13, 2021

fix cve-2021-23424, see pmmmwh/react-refresh-webpack-plugin#501 and T…

e222fb4

…jatse/ansi-html#19 (comment)

aruniverse mentioned this issue Oct 13, 2021

Fix CVE 2021 23424 imodeljs/create-react-app#56

Merged

jmthibault79 mentioned this issue Oct 14, 2021

[risk=low][no ticket] replace the vulnerable + abandoned ansi-html with ansi-html-community all-of-us/workbench#5756

Merged

8 tasks

vkpraveen mentioned this issue Oct 18, 2021

ANSI-HTML is vulnerable and unmaintained facebook/create-react-app#11504

Open

lomky mentioned this issue Nov 30, 2021

Adds ansi-html-community to resolve abandoned ansi-html vulnerability cagov/ui-claim-tracker#565

Merged

1 task

bexsoft mentioned this issue Dec 9, 2021

Updated ansi-html dependency to fix CVE vulnerability minio/console#1311

Merged

0xJem mentioned this issue Jan 2, 2022

Fix ansi-html vulnerability OlympusDAO/olympus-frontend#1049

Merged

gonadarian mentioned this issue Jan 5, 2022

vulnerable package version of custom-webpack being used inside build-angular for v12 angular/angular-cli#22433

Closed

digitaldogsbody added a commit to datacite/bracco that referenced this issue Jan 29, 2022

Replace ansi-html with ansi-html-community (Tjatse/ansi-html#19)

151f4c6

Tjatse closed this as completed in #20 Feb 28, 2022

mahdyar mentioned this issue Mar 17, 2022

Can't resolve 'ansi-html' in '.../node_modules/webpack-dev-server/client' mahdyar/ansi-html-community#10

Open

Abdul1110 mentioned this issue May 12, 2022

CVE-2021-23424 @ Npm-ansi-html-0.0.7 Abdul1110/TEST_ORION#13

Open

Exponential ReDoS (CVE-2021-23424) #19

Exponential ReDoS (CVE-2021-23424) #19

Comments

b-c-ds commented May 7, 2021 • edited

Doyensec Vulnerability Advisory

SUMMARY

TECHNICAL DESCRIPTION

REPRODUCTION STEPS

REMEDIATION

krishnaUIDev commented Jul 9, 2021

SymbioticKilla commented Aug 23, 2021

glenjamin commented Aug 23, 2021

danfuzz commented Aug 23, 2021

graniczny commented Aug 25, 2021

mahdyar commented Sep 5, 2021 • edited

CoryDanielson commented Oct 6, 2021 • edited

How to fix, if you're using yarn

Install ansi-html-community

Add the resolution to your package.json

Confirmation

cmacdonnacha commented Oct 7, 2021

Install ansi-html-community

Add the resolution to your package.json

Confirmation

CoryDanielson commented Oct 7, 2021

cmacdonnacha commented Oct 7, 2021

jdehorty commented Oct 16, 2021 • edited

cmacdonnacha commented Oct 18, 2021

ranka23 commented Oct 26, 2021 • edited

How to fix, if you're using yarn

Install ansi-html-community

Add the resolution to your package.json

Confirmation

ShanUSAC commented Oct 29, 2021

How to fix, if you're using yarn

Install ansi-html-community

Add the resolution to your package.json

Confirmation

ShanUSAC commented Oct 29, 2021

How to fix, if you're using yarn

Install ansi-html-community

Add the resolution to your package.json

Confirmation

jdehorty commented Oct 29, 2021

kpeters-cbsi commented Nov 10, 2021

How to fix, if you're using yarn

Install ansi-html-community

Add the resolution to your package.json

Confirmation

kdblocher commented Nov 16, 2021

kpeters-cbsi commented Nov 16, 2021

sauldeleon commented Nov 18, 2021

kdblocher commented Nov 18, 2021 via email

Yonet commented Feb 23, 2022

How to fix, if you're using npm

b-c-ds commented May 7, 2021 •

edited

mahdyar commented Sep 5, 2021 •

edited

CoryDanielson commented Oct 6, 2021 •

edited

jdehorty commented Oct 16, 2021 •

edited

ranka23 commented Oct 26, 2021 •

edited