Vulnerable dependency: ansi-regex

[eclecto]

Is there an existing issue for this?

• I have searched the existing issues

Current behavior

npm audit results in:

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │  Inefficient Regular Expression Complexity in                │
│               │ chalk/ansi-regex                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ ansi-regex                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @nestjs/schematics [dev]                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @nestjs/schematics > @angular-devkit/schematics > ora >      │
│               │ strip-ansi > ansi-regex                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://github.com/advisories/GHSA-93q8-gq69-wqmw            │
└───────────────┴──────────────────────────────────────────────────────────────┘

Minimum reproduction code

https://github.com/nestjs/schematics

Steps to reproduce

1. npm i @nestjs/schematics
2. npm audit

Expected behavior

npm audit passes

Package version

7.0.0

NestJS version

7.0.7

Node.js version

12.13.1

In which operating systems have you tested?

• macOS
• Windows
• Linux

Other

See also:
GHSA-93q8-gq69-wqmw
nestjs/nest-cli#1358

[kamilmysliwiec]

Package version
7.0.0
NestJS version
7.0.7

Update to the latest version and the error should be gone.