web/core/yarn.lock (yarn)
=========================
Total: 3 (UNKNOWN: 0, HIGH: 3, CRITICAL: 0)
+------------+------------------+----------+-------------------+---------------+--------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
+------------+------------------+----------+-------------------+---------------+--------------------------------------+
| ansi-regex | CVE-2021-3807 | HIGH | 3.0.0 | 5.0.1, 6.0.1 | node-ansi-regex: inefficient |
| | | | | | regular expression |
| | | | | | complexity allows for a crash |
| | | | | | -->avd.aquasec.com/nvd/cve-2021-3807 |
+ + + +-------------------+ + +
| | | | 4.1.0 | | |
| | | | | | |
| | | | | | |
| | | | | | |
+ + + +-------------------+ + +
| | | | 5.0.0 | | |
| | | | | | |
| | | | | | |
| | | | | | |
+------------+------------------+----------+-------------------+---------------+--------------------------------------+
ansi-regex version.Closed: outdated
11.0 🔥
javascript
It is used for security vulnerabilities which do not need a security advisory. For example, security issues in projects which do not have security advisory coverage, or forward-porting a change already disclosed in a security advisory. See Drupal’s security advisory policy for details. Be careful publicly disclosing security vulnerabilities! Use the “Report a security vulnerability” link in the project page’s sidebar. See how to report a security issue for details.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.