<p dir="auto"></p><div class="Box Box--condensed my-2">
  <div class="Box-header f6">
    <p class="mb-0 text-bold">
      <a href="https://github.com/npm/cli/blob/4dbeb007d0d6350284c7b1edbf4d5b0030c67c66/package.json#L72">cli/package.json</a>
    </p>
    <p class="mb-0 color-fg-muted">
         Line 72
      in
      <a data-pjax="true" class="commit-tease-sha" href="/npm/cli/commit/4dbeb007d0d6350284c7b1edbf4d5b0030c67c66">4dbeb00</a>
    </p>
  </div>
  <div itemprop="text" class="Box-body p-0 blob-wrapper blob-wrapper-embedded data">
    <table class="highlight tab-size mb-0 js-file-line-container" data-tab-size="8" data-paste-markdown-skip="">

        <tbody><tr class="border-0">
          <td id="L72" class="blob-num border-0 px-3 py-0 color-bg-default" data-line-number="72"></td>
          <td id="LC72" class="blob-code border-0 px-3 py-0 color-bg-default blob-code-inner js-file-line"> <span class="pl-ent">"cli-table3"</span>: <span class="pl-s"><span class="pl-pds">"</span>^0.6.0<span class="pl-pds">"</span></span>, </td>
        </tr>
    </tbody></table>
  </div>
</div>
<p></p>
<p dir="auto">vulnerability found in "ansi-regex", child dependency of cli-table3<br>
+-- cli-table3@0.6.0<br>
|  -- string-width@4.2.2 (at 4.2.3 it upgrades problematic dependencies)<br>
|  ---- strip-ansi@6.0.0<br>
|  ------ ansi-regex@5.0.0 (vulnerable version)</p>
<p dir="auto">while updating npm it keep installing "ansi-regex@5.0.0" .<br>
please remove or replace this package.</p>
<h3 dir="auto">Is there an existing issue for this?</h3>
<ul class="contains-task-list">
<li class="task-list-item"><input type="checkbox" id="" disabled="" class="task-list-item-checkbox" checked=""> I have searched the existing issues</li>
</ul>
<h3 dir="auto">Current Behavior</h3>
<p dir="auto">Security scans fail do to high warning of a security vulnerability in ansi-regex.</p>
<h3 dir="auto">Expected Behavior</h3>
<p dir="auto">Security scan pass.</p>
<h3 dir="auto">Steps To Reproduce</h3>
<p dir="auto">We use twistlock to do vulnerability detection, which relies on NVD to get vulnerability data.</p>
<p dir="auto">The issue can be found here, <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-3807" rel="nofollow">https://nvd.nist.gov/vuln/detail/CVE-2021-3807</a> and here, <a href="https://snyk.io/vuln/npm:ansi-regex" rel="nofollow">https://snyk.io/vuln/npm:ansi-regex</a>.</p>
<h3 dir="auto">Environment</h3>
<ul dir="auto">
<li>OS: Mac 11.5.2</li>
<li>Node: v12.21.0</li>
<li>npm: 7.21.1</li>
</ul>