-
Notifications
You must be signed in to change notification settings - Fork 35
Open
Description
ora dependency introduces deep unsafe dependency ansi-regex@2.1.1:
ttag-cli@1.10.10 › ora@1.3.0 › chalk@1.1.3 › has-ansi@2.0.0 › ansi-regex@2.1.1
https://nvd.nist.gov/vuln/detail/CVE-2021-3807
https://security.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
This would likely be fixed by uprading ora which seems like it could be easy enough given the simple use?
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels