[Pkg-javascript-devel] Bug#994568: node-ansi-regex: CVE-2021-3807

[Salvatore Bonaccorso]

Source: node-ansi-regex
Version: 5.0.0-2
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
Control: found -1 5.0.0-1

Hi,

The following vulnerability was published for node-ansi-regex.

CVE-2021-3807[0]:
| ansi-regex is vulnerable to Inefficient Regular Expression Complexity


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-3807
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807
[1] https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
[2] https://github.com/chalk/ansi-regex/pull/37

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore