Skip to content

Commit bff4a8a

Browse files
balajacatherinfacebook-github-bot
authored andcommitted
Fix CVE-2021-3807: Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1
Summary: Fix CVE-2021-3807: Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1 ## Summary Upgrading the transitive dependency `ansi-regex` from 4.1.1 to 5.0.1 to fix CVE-2021-3807 (ReDoS vulnerability). **Dependency chain:** react-native/tester -> react-native-community/cli-platform-android -> logkitty -> ansi-fragments -> strip-ansi -> ansi-regex@4.1.1 The fix was applied via a temporary yarn resolution, then removed. The version stuck at 5.0.1 without the resolution. Only yarn.lock is changed. Changelog: [General][Security] -Upgrade transitive dependency ansi-regex from 4.1.1 to 5.0.1 Differential Revision: D99867505
1 parent 8bac1df commit bff4a8a

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2681,9 +2681,9 @@ ansi-regex@^5.0.0, ansi-regex@^5.0.1:
26812681
integrity sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==
26822682

26832683
ansi-regex@^6.0.1:
2684-
version "6.0.1"
2685-
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-6.0.1.tgz#3183e38fae9a65d7cb5e53945cd5897d0260a06a"
2686-
integrity sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==
2684+
version "6.2.2"
2685+
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-6.2.2.tgz#60216eea464d864597ce2832000738a0589650c1"
2686+
integrity sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==
26872687

26882688
ansi-styles@^3.2.0:
26892689
version "3.2.1"

0 commit comments

Comments
 (0)