Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerable dependencies - cli-table #1358

Closed
2 of 4 tasks
iloverink opened this issue Oct 8, 2021 · 1 comment
Closed
2 of 4 tasks

Vulnerable dependencies - cli-table #1358

iloverink opened this issue Oct 8, 2021 · 1 comment

Comments

@iloverink
Copy link
Contributor

Is there an existing issue for this?

  • I have searched the existing issues

Current behavior

❯ npm audit

npm audit report

ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - GHSA-93q8-gq69-wqmw
fix available via npm audit fix --force
Will install @nestjs/cli@6.2.1, which is a breaking change
node_modules/string-width/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/string-width/node_modules/strip-ansi
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/string-width
cli-table3 0.5.0 - 0.5.1
Depends on vulnerable versions of string-width
node_modules/cli-table3
@nestjs/cli >=6.3.0
Depends on vulnerable versions of cli-table3
node_modules/@nestjs/cli

5 moderate severity vulnerabilities

Minimum reproduction code

https://github.com/nestjs/nest-cli

Steps to reproduce

  1. npm install @nestjs/cli
  2. npm audit

Expected behavior

Clean audit report

Package version

8.1.2

NestJS version

8.0.9

Node.js version

16.10.0

In which operating systems have you tested?

  • macOS
  • Windows
  • Linux

Other

No response

@kamilmysliwiec
Copy link
Member

Let's track this here #1359

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants