Skip to content

Commit 11b4534

Browse files
balajacatherinfacebook-github-bot
authored andcommitted
Fix CVE-2021-3807: Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1 (#56359)
Summary: Fix CVE-2021-3807: Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1 ## Summary Upgrading the transitive dependency `ansi-regex` from 4.1.1 to 5.0.1 to fix CVE-2021-3807 (ReDoS vulnerability). **Dependency chain:** react-native/tester -> react-native-community/cli-platform-android -> logkitty -> ansi-fragments -> strip-ansi -> ansi-regex@4.1.1 The fix was applied via yarn resolution,. Changelog: [General][Security] -Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1 Reviewed By: cortinico Differential Revision: D99867505
1 parent b1d12f5 commit 11b4534

File tree

2 files changed

+3
-12
lines changed

2 files changed

+3
-12
lines changed

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -123,6 +123,7 @@
123123
"react-is": "19.2.3",
124124
"on-headers": "1.1.0",
125125
"compression": "1.8.1",
126-
"@microsoft/api-extractor/minimatch": "3.1.4"
126+
"@microsoft/api-extractor/minimatch": "3.1.4",
127+
"**/ansi-regex": "5.0.1"
127128
}
128129
}

yarn.lock

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -2670,21 +2670,11 @@ ansi-fragments@^0.2.1:
26702670
slice-ansi "^2.0.0"
26712671
strip-ansi "^5.0.0"
26722672

2673-
ansi-regex@^4.1.0:
2674-
version "4.1.1"
2675-
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.1.1.tgz#164daac87ab2d6f6db3a29875e2d1766582dabed"
2676-
integrity sha512-ILlv4k/3f6vfQ4OoP2AGvirOktlQ98ZEL1k9FaQjxa3L1abBgbuTDAdPOpvbGncC0BTVQrl+OM8xZGK6tWXt7g==
2677-
2678-
ansi-regex@^5.0.0, ansi-regex@^5.0.1:
2673+
ansi-regex@5.0.1, ansi-regex@^4.1.0, ansi-regex@^5.0.0, ansi-regex@^5.0.1, ansi-regex@^6.0.1:
26792674
version "5.0.1"
26802675
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.1.tgz#082cb2c89c9fe8659a311a53bd6a4dc5301db304"
26812676
integrity sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==
26822677

2683-
ansi-regex@^6.0.1:
2684-
version "6.0.1"
2685-
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-6.0.1.tgz#3183e38fae9a65d7cb5e53945cd5897d0260a06a"
2686-
integrity sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==
2687-
26882678
ansi-styles@^3.2.0:
26892679
version "3.2.1"
26902680
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"

0 commit comments

Comments
 (0)