node-ansi-regex: CVE-2021-3807

Debian Bug report logs - #994568
node-ansi-regex: CVE-2021-3807

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: node-ansi-regex: CVE-2021-3807

Date: Fri, 17 Sep 2021 21:49:44 +0200

Source: node-ansi-regex
Version: 5.0.0-2
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Control: found -1 5.0.0-1

Hi,

The following vulnerability was published for node-ansi-regex.

CVE-2021-3807[0]:
| ansi-regex is vulnerable to Inefficient Regular Expression Complexity


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-3807
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807
[1] https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
[2] https://github.com/chalk/ansi-regex/pull/37

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Message #16 received at 994568-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 994568-submitter@bugs.debian.org

Subject: closing 994568

Date: Wed, 22 Sep 2021 16:34:50 +0200

close 994568 5.0.1-1
thanks

Send a report that this bug log contains spam.