Security vulnerability in nested ansi-regex package

[cm185288]

Found a security vulnerability in the ansi-regex package, which is a nested dependency from the yargs package.

Here's the relevant vulnerability page from NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-3807

Has been updated in Yargs 17.2.1

[mhamann]

Thanks for reporting. I'd just noticed this vulnerability as well in some other packages earlier today.

[robbysamtech]

Hi there - Do we know if there is a ETA for this to be fixed?

[mhamann]

@robbysamtech it's on my to-do list for next week!

[makiri1993]

Hey 👋
Any news on this?