CVE catalog

CVE-2021-3807

node-ansi-regex: CVE-2021-3807

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Sep 17, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 3.55% · Oct 25, 2026

ansi-regex is vulnerable to Inefficient Regular Expression Complexity

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	node-ansi-regex	sid	`6.2.2+~cs4.0.2-1`	fixed
Debian	node-ansi-regex	forky	`6.2.2+~cs4.0.2-1`	fixed
Debian	node-ansi-regex	trixie	`5.0.1-1`	fixed
Debian	node-ansi-regex	bookworm	`5.0.1-1`	fixed
Npm	ansi-regex	Not reported	`3.0.1`	fixed
Npm	ansi-regex	Not reported	`5.0.1`	fixed
Npm	ansi-regex	Not reported	`4.1.1`	fixed
Npm	ansi-regex	Not reported	`3.0.1`	fixed
Cpe	ansi-regex	Not reported	Not reported	unknown
Cpe	communications_cloud_native_core_policy	Not reported	Not reported	unknown
Suse	grafana	linux enterprise module for package hub 15 sp4	`9.5.1-150200.3.41.3`	fixed
Suse	grafana	linux enterprise module for package hub 15 sp5	`9.5.1-150200.3.41.3`	fixed
Opensuse	grafana	leap 15.4	`9.5.1-150200.3.41.3`	fixed
Opensuse	grafana	leap 15.5	`9.5.1-150200.3.41.3`	fixed
Suse	grafana	manager client tools 12	`9.5.1-1.48.1`	fixed
Suse	mgr-daemon	manager client tools 12	`4.3.7-1.41.1`	fixed
Suse	spacecmd	manager client tools 12	`4.3.21-38.121.1`	fixed
Suse	uyuni-common-libs	manager client tools 12	`4.3.8-1.33.1`	fixed
Suse	zypp-plugin-spacewalk	manager client tools 12	`1.0.14-30.42.1`	fixed
Suse	grafana	linux enterprise module for package hub 15 sp5	`9.5.8-150200.3.53.2`	fixed
Opensuse	grafana	leap 15.5	`9.5.8-150200.3.53.2`	fixed
Suse	golang-github-lusitaniae-apache_exporter	manager client tools 12	`1.0.0-1.21.2`	fixed
Suse	golang-github-prometheus-alertmanager	manager client tools 12	`0.26.0-1.24.2`	fixed
Suse	golang-github-prometheus-prometheus	manager client tools 12	`2.45.0-1.50.2`	fixed
Suse	grafana	manager client tools 12	`9.5.8-1.60.1`	fixed
Suse	mgr-daemon	manager client tools 12	`4.3.8-1.44.2`	fixed
Suse	prometheus-postgres_exporter	manager client tools 12	`0.10.1-1.17.2`	fixed
Suse	spacecmd	manager client tools 12	`4.3.26-38.136.2`	fixed
Suse	spacewalk-client-tools	manager client tools 12	`4.3.18-52.95.2`	fixed
Suse	dracut-saltboot	manager client tools 15	`0.1.1681904360.84ef141-150000.1.50.1`	fixed
Suse	grafana	manager client tools 15	`9.5.1-150000.1.48.5`	fixed
Suse	mgr-daemon	manager client tools 15	`4.3.7-150000.1.41.1`	fixed
Suse	spacecmd	manager client tools 15	`4.3.21-150000.3.98.1`	fixed
Suse	uyuni-common-libs	manager client tools 15	`4.3.8-150000.1.33.1`	fixed
Suse	zypp-plugin-spacewalk	manager client tools 15	`1.0.14-150000.3.35.1`	fixed
Suse	bind	manager client tools for sle micro 5	`9.16.6-150000.12.65.1`	fixed
Suse	dracut-saltboot	manager client tools for sle micro 5	`0.1.1681904360.84ef141-150000.1.50.1`	fixed
Suse	zypp-plugin-spacewalk	manager proxy module 4.2	`1.0.14-150000.3.35.1`	fixed
Suse	zypp-plugin-spacewalk	manager proxy module 4.3	`1.0.14-150000.3.35.1`	fixed
Suse	bind	linux enterprise high performance computing 15 sp1-ltss	`9.16.6-150000.12.65.1`	fixed
Suse	bind	linux enterprise high performance computing 15 sp2-ltss	`9.16.6-150000.12.65.1`	fixed
Suse	bind	linux enterprise server 15 sp1-ltss	`9.16.6-150000.12.65.1`	fixed
Suse	bind	linux enterprise server 15 sp2-ltss	`9.16.6-150000.12.65.1`	fixed
Suse	bind	linux enterprise server for sap applications 15 sp1	`9.16.6-150000.12.65.1`	fixed
Suse	bind	linux enterprise server for sap applications 15 sp2	`9.16.6-150000.12.65.1`	fixed
Suse	bind	enterprise storage 7	`9.16.6-150000.12.65.1`	fixed
Opensuse	bind	leap 15.4	`9.16.6-150000.12.65.1`	fixed
Opensuse	dracut-saltboot	leap 15.4	`0.1.1681904360.84ef141-150000.1.50.1`	fixed
Opensuse	spacecmd	leap 15.4	`4.3.21-150000.3.98.1`	fixed
Opensuse	wire	leap 15.4	`0.5.0-150000.1.12.3`	fixed
Opensuse	dracut-saltboot	leap 15.5	`0.1.1681904360.84ef141-150000.1.50.1`	fixed
Opensuse	spacecmd	leap 15.5	`4.3.21-150000.3.98.1`	fixed
Opensuse	wire	leap 15.5	`0.5.0-150000.1.12.3`	fixed
Opensuse	grafana	tumbleweed	`9.3.6-1.1`	fixed
Suse	golang-github-lusitaniae-apache_exporter	manager client tools 15	`1.0.0-150000.1.20.1`	fixed
Suse	golang-github-prometheus-prometheus	manager client tools 15	`2.45.0-150000.3.53.1`	fixed
Suse	grafana	manager client tools 15	`9.5.8-150000.1.60.2`	fixed
Suse	mgr-daemon	manager client tools 15	`4.3.8-150000.1.44.1`	fixed
Suse	prometheus-postgres_exporter	manager client tools 15	`0.10.1-150000.1.17.1`	fixed
Suse	spacecmd	manager client tools 15	`4.3.26-150000.3.113.1`	fixed
Suse	spacewalk-client-tools	manager client tools 15	`4.3.18-150000.3.86.2`	fixed
Suse	uyuni-proxy-systemd-services	manager client tools 15	`4.3.10-150000.1.15.1`	fixed
Suse	uyuni-proxy-systemd-services	manager client tools for sle micro 5	`4.3.10-150000.1.15.1`	fixed
Suse	golang-github-lusitaniae-apache_exporter	manager proxy module 4.3	`1.0.0-150000.1.20.1`	fixed
Suse	golang-github-lusitaniae-apache_exporter	manager server module 4.3	`1.0.0-150000.1.20.1`	fixed
Opensuse	golang-github-lusitaniae-apache_exporter	leap 15.5	`1.0.0-150000.1.20.1`	fixed
Opensuse	prometheus-postgres_exporter	leap 15.5	`0.10.1-150000.1.17.1`	fixed
Opensuse	spacecmd	leap 15.5	`4.3.26-150000.3.113.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	node-ansi-regex	source	sid	`5.0.1-1`	not yet assigned	Not reported	[994568]
Debian	node-ansi-regex	source	forky	`5.0.1-1`	not yet assigned	Not reported	[994568]
Debian	node-ansi-regex	source	trixie	`5.0.1-1`	not yet assigned	Not reported	[994568]
Debian	node-ansi-regex	source	bookworm	`5.0.1-1`	not yet assigned	Not reported	[994568]
Npm	ansi-regex	npm	Not reported	`3.0.1`	Not reported	GHSA-93Q8-GQ69-WQMW	Not reported
Npm	ansi-regex	npm	Not reported	`5.0.1`	Not reported	Not reported	Not reported
Npm	ansi-regex	npm	Not reported	`4.1.1`	Not reported	Not reported	Not reported
Npm	ansi-regex	npm	Not reported	`3.0.1`	Not reported	Not reported	Not reported
Suse	grafana	rpm	linux enterprise module for package hub 15 sp4	`9.5.1-150200.3.41.3`	Not reported	SUSE-SU-2023:2575-1	Not reported
Suse	grafana	rpm	linux enterprise module for package hub 15 sp5	`9.5.1-150200.3.41.3`	Not reported	SUSE-SU-2023:2575-1	Not reported
Opensuse	grafana	rpm	leap 15.4	`9.5.1-150200.3.41.3`	Not reported	SUSE-SU-2023:2575-1	Not reported
Opensuse	grafana	rpm	leap 15.5	`9.5.1-150200.3.41.3`	Not reported	SUSE-SU-2023:2575-1	Not reported
Suse	grafana	rpm	manager client tools 12	`9.5.1-1.48.1`	Not reported	SUSE-SU-2023:2579-1	Not reported
Suse	mgr-daemon	rpm	manager client tools 12	`4.3.7-1.41.1`	Not reported	SUSE-SU-2023:2579-1	Not reported
Suse	spacecmd	rpm	manager client tools 12	`4.3.21-38.121.1`	Not reported	SUSE-SU-2023:2579-1	Not reported
Suse	uyuni-common-libs	rpm	manager client tools 12	`4.3.8-1.33.1`	Not reported	SUSE-SU-2023:2579-1	Not reported
Suse	zypp-plugin-spacewalk	rpm	manager client tools 12	`1.0.14-30.42.1`	Not reported	SUSE-SU-2023:2579-1	Not reported
Suse	grafana	rpm	linux enterprise module for package hub 15 sp5	`9.5.8-150200.3.53.2`	Not reported	SUSE-RU-2024:0511-1	Not reported
Opensuse	grafana	rpm	leap 15.5	`9.5.8-150200.3.53.2`	Not reported	SUSE-RU-2024:0511-1	Not reported
Suse	golang-github-lusitaniae-apache_exporter	rpm	manager client tools 12	`1.0.0-1.21.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	golang-github-prometheus-alertmanager	rpm	manager client tools 12	`0.26.0-1.24.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	golang-github-prometheus-prometheus	rpm	manager client tools 12	`2.45.0-1.50.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	grafana	rpm	manager client tools 12	`9.5.8-1.60.1`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	mgr-daemon	rpm	manager client tools 12	`4.3.8-1.44.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	prometheus-postgres_exporter	rpm	manager client tools 12	`0.10.1-1.17.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	spacecmd	rpm	manager client tools 12	`4.3.26-38.136.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	spacewalk-client-tools	rpm	manager client tools 12	`4.3.18-52.95.2`	Not reported	SUSE-SU-2024:0486-1	Not reported
Suse	dracut-saltboot	rpm	manager client tools 15	`0.1.1681904360.84ef141-150000.1.50.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	grafana	rpm	manager client tools 15	`9.5.1-150000.1.48.5`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	mgr-daemon	rpm	manager client tools 15	`4.3.7-150000.1.41.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	spacecmd	rpm	manager client tools 15	`4.3.21-150000.3.98.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	uyuni-common-libs	rpm	manager client tools 15	`4.3.8-150000.1.33.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	zypp-plugin-spacewalk	rpm	manager client tools 15	`1.0.14-150000.3.35.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	manager client tools for sle micro 5	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	dracut-saltboot	rpm	manager client tools for sle micro 5	`0.1.1681904360.84ef141-150000.1.50.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	zypp-plugin-spacewalk	rpm	manager proxy module 4.2	`1.0.14-150000.3.35.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	zypp-plugin-spacewalk	rpm	manager proxy module 4.3	`1.0.14-150000.3.35.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	linux enterprise high performance computing 15 sp1-ltss	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	linux enterprise high performance computing 15 sp2-ltss	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	linux enterprise server 15 sp1-ltss	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	linux enterprise server 15 sp2-ltss	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	linux enterprise server for sap applications 15 sp1	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	linux enterprise server for sap applications 15 sp2	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Suse	bind	rpm	enterprise storage 7	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	bind	rpm	leap 15.4	`9.16.6-150000.12.65.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	dracut-saltboot	rpm	leap 15.4	`0.1.1681904360.84ef141-150000.1.50.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	spacecmd	rpm	leap 15.4	`4.3.21-150000.3.98.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	wire	rpm	leap 15.4	`0.5.0-150000.1.12.3`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	dracut-saltboot	rpm	leap 15.5	`0.1.1681904360.84ef141-150000.1.50.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	spacecmd	rpm	leap 15.5	`4.3.21-150000.3.98.1`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	wire	rpm	leap 15.5	`0.5.0-150000.1.12.3`	Not reported	SUSE-SU-2023:2578-1	Not reported
Opensuse	grafana	rpm	tumbleweed	`9.3.6-1.1`	Not reported	OPENSUSE-SU-2024:12723-1	Not reported
Suse	golang-github-lusitaniae-apache_exporter	rpm	manager client tools 15	`1.0.0-150000.1.20.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	golang-github-prometheus-prometheus	rpm	manager client tools 15	`2.45.0-150000.3.53.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	grafana	rpm	manager client tools 15	`9.5.8-150000.1.60.2`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	mgr-daemon	rpm	manager client tools 15	`4.3.8-150000.1.44.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	prometheus-postgres_exporter	rpm	manager client tools 15	`0.10.1-150000.1.17.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	spacecmd	rpm	manager client tools 15	`4.3.26-150000.3.113.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	spacewalk-client-tools	rpm	manager client tools 15	`4.3.18-150000.3.86.2`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	uyuni-proxy-systemd-services	rpm	manager client tools 15	`4.3.10-150000.1.15.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	uyuni-proxy-systemd-services	rpm	manager client tools for sle micro 5	`4.3.10-150000.1.15.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	golang-github-lusitaniae-apache_exporter	rpm	manager proxy module 4.3	`1.0.0-150000.1.20.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Suse	golang-github-lusitaniae-apache_exporter	rpm	manager server module 4.3	`1.0.0-150000.1.20.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Opensuse	golang-github-lusitaniae-apache_exporter	rpm	leap 15.5	`1.0.0-150000.1.20.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Opensuse	prometheus-postgres_exporter	rpm	leap 15.5	`0.10.1-150000.1.17.1`	Not reported	SUSE-SU-2024:0487-1	Not reported
Opensuse	spacecmd	rpm	leap 15.5	`4.3.26-150000.3.113.1`	Not reported	SUSE-SU-2024:0487-1	Not reported

[Debian bug #994568]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[node-ansi-regex]Fixed
Details (2)
- 5.0.1-1 · all · bookworm
  Fixed · Fixed: 5.0.1-1
  dsa · node-ansi-regex · debian · bookworm; dsa · node-ansi-regex · debian · 12
- 5.0.1-1 · all · bookworm
  Fixed · Fixed: 5.0.1-1
  dsa · node-ansi-regex · debian · bookworm; dsa · node-ansi-regex · debian · 12

[Debian 13 (Trixie)]

[node-ansi-regex]Fixed
Details (2)
- 5.0.1-1 · all · trixie
  Fixed · Fixed: 5.0.1-1
  dsa · node-ansi-regex · debian · 13
- 5.0.1-1 · all · trixie
  Fixed · Fixed: 5.0.1-1
  dsa · node-ansi-regex · debian · 13

[openSUSE Tumbleweed]

[grafana]Fixed
Source package: [grafana]
Details (1)
- 12.4.5-4.1 · x86_64 · tumbleweed
  Fixed · Fixed: 9.3.6-1.1
  dsa · grafana · opensuse · tumbleweed

Observed: Oct 23, 2026, 6:01:27 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]