Commit 11b4534
Fix CVE-2021-3807: Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1 (#56359)
Summary:
Fix CVE-2021-3807: Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1
## Summary
Upgrading the transitive dependency `ansi-regex` from 4.1.1 to 5.0.1 to fix CVE-2021-3807 (ReDoS vulnerability).
**Dependency chain:** react-native/tester -> react-native-community/cli-platform-android -> logkitty -> ansi-fragments -> strip-ansi -> ansi-regex@4.1.1
The fix was applied via yarn resolution,.
Changelog:
[General][Security] -Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1
Reviewed By: cortinico
Differential Revision: D998675051 parent b1d12f5 commit 11b4534
2 files changed
+3
-12
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
123 | 123 | | |
124 | 124 | | |
125 | 125 | | |
126 | | - | |
| 126 | + | |
| 127 | + | |
127 | 128 | | |
128 | 129 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2670 | 2670 | | |
2671 | 2671 | | |
2672 | 2672 | | |
2673 | | - | |
2674 | | - | |
2675 | | - | |
2676 | | - | |
2677 | | - | |
2678 | | - | |
| 2673 | + | |
2679 | 2674 | | |
2680 | 2675 | | |
2681 | 2676 | | |
2682 | 2677 | | |
2683 | | - | |
2684 | | - | |
2685 | | - | |
2686 | | - | |
2687 | | - | |
2688 | 2678 | | |
2689 | 2679 | | |
2690 | 2680 | | |
| |||
0 commit comments