Skip to content

Security Vulnerability in NPM CLI #4346

@kcak11

Description

@kcak11

Noticing a security vulnerability [CVE-2021-3807] when scanning the "npm" package with JFrog Xray as below:

The package cli-table3 and one of its dependency ansi-regex need to be bumped up in order to fix this issue.

Full Dependency Tree:

test-app@1.0.0
└─┬ npm@8.3.1
  └─┬ cli-table3@0.6.0
    └─┬ string-width@4.2.2
      └─┬ strip-ansi@6.0.0
        └── ansi-regex@5.0.0 

This vulnerability is reported with a "High Severity".

The vulnerability is fixed with ansi-regex@6.0.1

Please advise.

Thanks in advance.

(Also see: nodejs/node#41039)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions