EUVD-2021-2021

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

ansi-regex is vulnerable to Inefficient Regular Expression Complexity in EUVD-2021-2021

Reporter	Title	Published	Views	Family All 230
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 May 202218:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in moment, ansi-regex, Node.js, and minimatch may affect IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management (CVE-2022-31129, CVE-2022-24785, CVE-2021-3807, CVE-2022-29244, CVE-2022-3517)	17 Mar 202309:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to denial of service due to ansi-regex module (CVE-2021-3807)	4 Jul 202216:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, OpenSSL, trim, and Chalk ansi-regex module might affect IBM Storage Defender – Data Protect	31 Oct 202316:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	15 Jul 202516:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	20 Apr 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	18 Oct 202213:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	31 May 202214:57	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:01	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "67767f6d-06e2-3437-917d-6b043f72d78c",
        "vendor": {
          "name": "chalk"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f280daab-70e2-37ac-8b5d-b5950edb2746",
        "product": {
          "name": "chalk/ansi-regex"
        },
        "product_version": "unspecified <5.0.1"
      },
      {
        "id": "f38abc14-7f97-360d-b57d-a1b17b29df3e",
        "product": {
          "name": "chalk/ansi-regex"
        },
        "product_version": "unspecified <6.0.1"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3807
github	www.github.com/chalk/ansi-regex/issues/38
github	www.github.com/chalk/ansi-regex/issues/38
github	www.github.com/chalk/ansi-regex/commit/419250fa510bf31b4cc672e76537a64f9332e1f1
github	www.github.com/chalk/ansi-regex/commit/75a657da7af875b2e2724fd6331bf0a4b23d3c9a
github	www.github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
github	www.github.com/chalk/ansi-regex/commit/c3c0b3f2736b9c01feec0fef33980c43720dcde8
app	www.app.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
github	www.github.com/chalk/ansi-regex
github	www.github.com/chalk/ansi-regex/releases/tag/v6.0.1

07 Oct 2025 00:30Current

7.4High risk

Vulners AI Score7.4

CVSS 37.5

CVSS 3.17.5

CVSS 27.8

EPSS0.00215

vulnerability regular expression complexity euvd-2021-2021