CVE-2021-3807: Ansi-Regex Project Ansi-Regex

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

ansi-regex is vulnerable to Inefficient Regular Expression Complexity

Affected products

• Ansi-Regex Project Ansi-Regex: from 4.0.0, before 4.1.1 (fixed in 4.1.1); version 3.0.0 only; version 5.0.0 only; version 6.0.0 only
• Oracle Communications Cloud Native Core Policy: version 1.15.0 only

Published 2021-09-17. Last modified 2026-10-08.