ansi-regex (npm)
Regular expression for matching ANSI escape codes
Advisories
5
Latest version
6.4.0
Released Sep 27, 2026
License
MIT
OpenSSF Scorecard
3.8 / 10
How to fix
Upgrading to 6.0.1 or later clears every advisory below that has a fix.
Upgrade commands
npm
npm install ansi-regex@6.4.0yarn
yarn add ansi-regex@6.4.0pnpm
pnpm add ansi-regex@6.4.0Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| MAL-2025-46966 Malicious code in ansi-regex (npm) |
Not rated yet | No fix yet | |
| GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex |
High EPSS 3.55% |
>= 6.0.0, < 6.0.1 | 6.0.1 |
| GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex |
High EPSS 3.55% |
>= 5.0.0, < 5.0.1 | 5.0.1 |
| GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex |
High EPSS 3.55% |
>= 4.0.0, < 4.1.1 | 4.1.1 |
| GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex |
High EPSS 3.55% |
>= 3.0.0, < 3.0.1 | 3.0.1 |
Source: git+https://github.com/chalk/ansi-regex.git
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor