Skip to content

Releases: chalk/ansi-regex

v5.0.1

14 Sep 15:59
Compare
Choose a tag to compare

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37)
    You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!

v6.0.1

10 Sep 20:26
Compare
Choose a tag to compare

Fixes

  • Fix ReDoS in certain cases (#37)
    You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

v6.0.0...v6.0.1

Thank you @yetingli for the patch and reproduction case!

v6.0.0

16 Apr 06:02
Compare
Choose a tag to compare

Breaking

v5.0.0...v6.0.0

v5.0.0

04 Oct 11:29
Compare
Choose a tag to compare

Breaking

Enhancements

v4.1.0...v5.0.0

v4.1.0

08 Mar 06:15
Compare
Choose a tag to compare
  • Support more escape code like links (#29) 96200bb

v4.0.0...v4.1.0