Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GHSA-93q8-gq69-wqmw needs updating #106

Closed
G-Rath opened this issue Mar 13, 2022 · 5 comments
Closed

GHSA-93q8-gq69-wqmw needs updating #106

G-Rath opened this issue Mar 13, 2022 · 5 comments

Comments

@G-Rath
Copy link

G-Rath commented Mar 13, 2022

I can't submit this via the standard way as the advisory doesn't exist in this database yet due to #19.

4.1.1 was published to fix GHSA-93q8-gq69-wqmw for the 4.x line: chalk/ansi-regex#46

So the affected versions should be updated to be:

image

@KateCatlin
Copy link
Collaborator

Thanks @G-Rath, I'll circle back to the team on this.

@chrisbloom7
Copy link
Contributor

While we are still working on finding a better way to handle the > operator in general, GHSA-93q8-gq69-wqmw is included in a list of advisories that we think can be updated to avoid using >. Hopefully we can get this one republished soon with an updated version range for ansi-regex.

@taladrane
Copy link
Collaborator

hi @G-Rath 👋 I wanted to follow up on this issue and see if this still needs to be addressed in the advisory. another community contribution came in after your initial issue as well that might have addressed some of your feedback.

here's what is currently listed in the advisory:
Screen Shot 2022-08-16 at 3 04 11 PM

how does the 2.1.1 version range you originally brought up in this issue fit into this? can you provide a public reference or link to it?

@G-Rath
Copy link
Author

G-Rath commented Aug 16, 2022

@taladrane this has now been resolved :)

@G-Rath G-Rath closed this as completed Aug 16, 2022
@taladrane
Copy link
Collaborator

thanks for the feedback @G-Rath! 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants