haoqunjiang/friendly-errors-webpack-plugin

Depends on vulnerable versions of strip-ansi

Closed this issue · 1 comments

waddles commented

Getting this from npm audit fix:

# npm audit report

ansi-regex  >2.1.1 <5.0.1
Severity: moderate
 Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
fix available via `npm audit fix --force`
Will install @soda/friendly-errors-webpack-plugin@1.7.1, which is a breaking change
node_modules/ansi-regex
  strip-ansi  4.0.0 - 5.2.0
  Depends on vulnerable versions of ansi-regex
  node_modules/strip-ansi
    @soda/friendly-errors-webpack-plugin  >=1.8.0
    Depends on vulnerable versions of strip-ansi
    node_modules/@soda/friendly-errors-webpack-plugin

I think it just needs strip-ansi dependency updated to ^6 but haven't tested.