{"id":"CVE-2021-3807","revision":null,"records":[{"revision":"23b579b7e5cc4e4da50f947e52e6d1c1","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-3807","aliases":[],"title":"Inefficient Regular Expression Complexity in chalk/ansi-regex","description":"ansi-regex is vulnerable to Inefficient Regular Expression Complexity","state":0,"publishedAt":"2021-09-17T00:00:00+00:00","modifiedAt":"2026-10-08T21:14:08.869+00:00","affected":[{"ecosystem":"Vendor product","name":"chalk/ansi-regex","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"chalk\",\n                    \"product\": \"chalk/ansi-regex\",\n                    \"versions\": [\n                        {\n                            \"version\": \"unspecified\",\n                            \"lessThan\": \"6.0.1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"version\": \"unspecified\",\n                            \"lessThan\": \"5.0.1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"version\": \"5.0.1\",\n                            \"status\": \"unaffected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994","https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20221014-0002/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-3807","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-3807","identifiers":["CVE-2021-3807"]},"retained":false,"historicalAffected":[]},{"revision":"3811ba551e73458fb815547d92e35284","observedAt":"2026-11-10T02:07:28.768+00:00","statement":{"source":"euvd","id":"EUVD-2021-2021","aliases":["CVE-2021-3807","GHSA-93q8-gq69-wqmw"],"title":"ansi-regex is vulnerable to Inefficient Regular Expression Complexity","description":"ansi-regex is vulnerable to Inefficient Regular Expression Complexity","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994","https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20221014-0002/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-2021","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Sep 17, 2021, 12:00:00 AM","dateUpdated":"Oct 8, 2026, 9:14:08 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2023:2579-1","title":"Security update for SUSE Manager Client Tools","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2022-0155","CVE-2022-27191","CVE-2022-27664","CVE-2022-31097","CVE-2022-31107","CVE-2022-32149","CVE-2022-35957","CVE-2022-36062","CVE-2022-41715","CVE-2022-46146","CVE-2023-1387","CVE-2023-1410"]},{"id":"RHSA-2022:0735","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.2 security updates and bug fixes","vulnerabilityIds":["CVE-2021-3807","CVE-2021-3918","CVE-2021-22963","CVE-2021-41089","CVE-2021-41091","CVE-2021-43565","CVE-2021-43816","CVE-2021-43858","CVE-2022-0235","CVE-2022-24450"]},{"id":"SUSE-SU-2024:0486-1","title":"Security update for SUSE Manager Client Tools","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2021-43798","CVE-2021-43815","CVE-2022-0155","CVE-2022-41715","CVE-2023-40577"]},{"id":"RHSA-2022:0246","title":"Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2020-7788","CVE-2020-28469","CVE-2021-3807","CVE-2021-3918","CVE-2021-22959","CVE-2021-22960","CVE-2021-33502","CVE-2021-37701","CVE-2021-37712"]},{"id":"SUSE-RU-2024:0511-1","title":"Recommended update for grafana","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2022-0155"]},{"id":"RHSA-2022:5483","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.2 security and bug fix update","vulnerabilityIds":["CVE-2021-3807","CVE-2022-0235","CVE-2022-0536"]},{"id":"SUSE-SU-2022:1717-1","title":"Security update for nodejs10","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918","CVE-2021-44906","CVE-2021-44907","CVE-2022-0235","CVE-2022-21824"]},{"id":"SUSE-SU-2024:0196-1","title":"Security Beta update for SUSE Manager Client Tools and Salt","vulnerabilityIds":["CVE-2020-7753","CVE-2021-20178","CVE-2021-20180","CVE-2021-20191","CVE-2021-20228","CVE-2021-3447","CVE-2021-3583","CVE-2021-3620","CVE-2021-36222","CVE-2021-3711","CVE-2021-3807","CVE-2021-3918","CVE-2021-41174","CVE-2021-41244","CVE-2021-43138","CVE-2021-43798","CVE-2021-43813","CVE-2021-43815","CVE-2022-0155","CVE-2022-23552","CVE-2022-27664","CVE-2022-29170","CVE-2022-31097","CVE-2022-31107","CVE-2022-31123","CVE-2022-31130","CVE-2022-32149","CVE-2022-35957","CVE-2022-36062","CVE-2022-39201","CVE-2022-39229","CVE-2022-39306","CVE-2022-39307","CVE-2022-39324","CVE-2022-41715","CVE-2022-41723","CVE-2022-46146","CVE-2023-0507","CVE-2023-0594","CVE-2023-1387","CVE-2023-1410","CVE-2023-2183","CVE-2023-2801","CVE-2023-3128"]},{"id":"WID-SEC-W-2022-2133","title":"JFrog Artifactory: Mehrere Schwachstellen in Drittanbieter-Komponenten","vulnerabilityIds":["CVE-2019-16869","CVE-2019-20444","CVE-2019-20445","CVE-2020-7608","CVE-2020-7789","CVE-2021-26291","CVE-2021-3807","CVE-2021-44906","CVE-2022-0235","CVE-2022-1962","CVE-2022-24823","CVE-2022-25857","CVE-2022-25878","CVE-2022-27191","CVE-2022-28131","CVE-2022-30187","CVE-2022-30633","CVE-2022-30635"]},{"id":"WID-SEC-W-2023-1542","title":"Red Hat OpenShift: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2015-20107","CVE-2018-25032","CVE-2020-10735","CVE-2020-16250","CVE-2020-16251","CVE-2020-17049","CVE-2021-28861","CVE-2021-3765","CVE-2021-3807","CVE-2021-4231","CVE-2021-4235","CVE-2021-4238","CVE-2021-43519","CVE-2021-43998","CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2021-44964","CVE-2021-46828","CVE-2021-46848","CVE-2022-0670","CVE-2022-1271","CVE-2022-1304","CVE-2022-1348","CVE-2022-1586","CVE-2022-1587","CVE-2022-21824","CVE-2022-2309","CVE-2022-23540","CVE-2022-23541","CVE-2022-24903","CVE-2022-2509","CVE-2022-26280","CVE-2022-27664","CVE-2022-2795","CVE-2022-2879","CVE-2022-2880","CVE-2022-28805","CVE-2022-29154","CVE-2022-30635","CVE-2022-3094","CVE-2022-31129","CVE-2022-32189","CVE-2022-32190","CVE-2022-33099","CVE-2022-3358","CVE-2022-34903","CVE-2022-3515","CVE-2022-3517","CVE-2022-35737","CVE-2022-36227","CVE-2022-3715","CVE-2022-3736","CVE-2022-37434","CVE-2022-38149","CVE-2022-3821","CVE-2022-38900","CVE-2022-3924","CVE-2022-40023","CVE-2022-40303","CVE-2022-40304","CVE-2022-40897","CVE-2022-41316","CVE-2022-41715","CVE-2022-41717","CVE-2022-41723","CVE-2022-41724","CVE-2022-41725","CVE-2022-42010","CVE-2022-42011","CVE-2022-42012","CVE-2022-42898","CVE-2022-42919","CVE-2022-43680","CVE-2022-4415","CVE-2022-45061","CVE-2022-45873","CVE-2022-46175","CVE-2022-47024","CVE-2022-47629","CVE-2022-48303","CVE-2022-48337","CVE-2022-48338","CVE-2022-48339","CVE-2023-0361","CVE-2023-0620","CVE-2023-0665","CVE-2023-22809","CVE-2023-24329","CVE-2023-2491","CVE-2023-24999","CVE-2023-25000","CVE-2023-25136"]},{"id":"WID-SEC-W-2023-0857","title":"IBM QRadar SIEM: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-15168","CVE-2020-24025","CVE-2020-28469","CVE-2020-28498","CVE-2020-28500","CVE-2020-7793","CVE-2021-23337","CVE-2021-27292","CVE-2021-29060","CVE-2021-32803","CVE-2021-32804","CVE-2021-33502","CVE-2021-33623","CVE-2021-37701","CVE-2021-37712","CVE-2021-37713","CVE-2021-3807"]},{"id":"openSUSE-SU-2022:0715-1","title":"Security update for nodejs14","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"SUSE-SU-2022:0563-1","title":"Security update for nodejs8","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"RHSA-2022:4814","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.6.5 security and bug fix update","vulnerabilityIds":["CVE-2021-3807","CVE-2021-39293"]},{"id":"WID-SEC-W-2022-0103","title":"Node.js: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-3807","CVE-2021-3918"]},{"id":"RHSA-2022:6449","title":"Red Hat Security Advisory: nodejs:16 security and bug fix update","vulnerabilityIds":["CVE-2021-3807","CVE-2022-32212","CVE-2022-32213","CVE-2022-32214","CVE-2022-32215","CVE-2022-33987"]},{"id":"openSUSE-SU-2022:0704-1","title":"Security update for nodejs8","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"WID-SEC-W-2026-0177","title":"Atlassian Bamboo, Bitbucket, Confluence und Jira: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-3807","CVE-2022-25883","CVE-2022-45693","CVE-2024-21538","CVE-2024-38286","CVE-2024-45296","CVE-2024-45801","CVE-2025-12383","CVE-2025-15284","CVE-2025-27152","CVE-2025-41249","CVE-2025-48976","CVE-2025-48989","CVE-2025-49146","CVE-2025-52434","CVE-2025-52999","CVE-2025-53689","CVE-2025-54988","CVE-2025-55163","CVE-2025-55752","CVE-2025-64775","CVE-2025-66516","CVE-2025-9287","CVE-2025-9288","CVE-2026-21569"]},{"id":"SUSE-SU-2022:0570-1","title":"Security update for nodejs10","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918","CVE-2022-21824"]},{"id":"WID-SEC-W-2023-0856","title":"IBM QRadar SIEM: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-11655","CVE-2020-11656","CVE-2020-13434","CVE-2020-13435","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632","CVE-2020-15168","CVE-2020-15358","CVE-2020-28469","CVE-2020-7788","CVE-2020-9327","CVE-2021-22918","CVE-2021-22930","CVE-2021-22931","CVE-2021-22939","CVE-2021-22940","CVE-2021-23343","CVE-2021-23362","CVE-2021-27290","CVE-2021-32803","CVE-2021-32804","CVE-2021-33502","CVE-2021-3672","CVE-2021-37701","CVE-2021-37712","CVE-2021-37713","CVE-2021-3807","CVE-2021-3918"]},{"id":"SUSE-SU-2024:0191-1","title":"Security Beta update for SUSE Manager Client Tools","vulnerabilityIds":["CVE-2020-7753","CVE-2021-36222","CVE-2021-3711","CVE-2021-3807","CVE-2021-3918","CVE-2021-39226","CVE-2021-41174","CVE-2021-41244","CVE-2021-43138","CVE-2021-43798","CVE-2021-43813","CVE-2021-43815","CVE-2022-0155","CVE-2022-21673","CVE-2022-21698","CVE-2022-21702","CVE-2022-21703","CVE-2022-21713","CVE-2022-23552","CVE-2022-27191","CVE-2022-27664","CVE-2022-29170","CVE-2022-31097","CVE-2022-31107","CVE-2022-31123","CVE-2022-31130","CVE-2022-32149","CVE-2022-35957","CVE-2022-36062","CVE-2022-39201","CVE-2022-39229","CVE-2022-39306","CVE-2022-39307","CVE-2022-39324","CVE-2022-41715","CVE-2022-41723","CVE-2022-46146","CVE-2023-0507","CVE-2023-0594","CVE-2023-1387","CVE-2023-1410","CVE-2023-2183","CVE-2023-2801","CVE-2023-3128","CVE-2023-40577"]},{"id":"RHSA-2022:5532","title":"Red Hat Security Advisory: Red Hat Fuse 7.11.0 release and security update","vulnerabilityIds":["CVE-2020-7020","CVE-2020-9484","CVE-2020-15250","CVE-2020-25689","CVE-2020-29582","CVE-2020-36518","CVE-2021-2471","CVE-2021-3629","CVE-2021-3642","CVE-2021-3644","CVE-2021-3807","CVE-2021-3859","CVE-2021-4178","CVE-2021-22060","CVE-2021-22096","CVE-2021-22119","CVE-2021-22569","CVE-2021-22573","CVE-2021-24122","CVE-2021-25122","CVE-2021-25329","CVE-2021-29505","CVE-2021-30640","CVE-2021-33037","CVE-2021-33813","CVE-2021-35515","CVE-2021-35516","CVE-2021-35517","CVE-2021-36090","CVE-2021-38153","CVE-2021-40690","CVE-2021-41079","CVE-2021-41766","CVE-2021-42340","CVE-2021-42550","CVE-2021-43797","CVE-2021-43859","CVE-2022-0084","CVE-2022-1259","CVE-2022-1319","CVE-2022-21363","CVE-2022-21724","CVE-2022-22932","CVE-2022-22950","CVE-2022-22968","CVE-2022-22970","CVE-2022-22971","CVE-2022-22976","CVE-2022-22978","CVE-2022-23181","CVE-2022-23221","CVE-2022-23596","CVE-2022-23913","CVE-2022-24614","CVE-2022-25845","CVE-2022-26336","CVE-2022-26520","CVE-2022-30126"]},{"id":"SUSE-SU-2022:0657-1","title":"Security update for nodejs12","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"SUSE-SU-2022:0569-1","title":"Security update for nodejs14","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"WID-SEC-W-2022-0607","title":"Red Hat FUSE: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-15250","CVE-2020-25689","CVE-2020-29582","CVE-2020-36518","CVE-2020-7020","CVE-2020-9484","CVE-2021-22060","CVE-2021-22096","CVE-2021-22119","CVE-2021-22569","CVE-2021-22573","CVE-2021-24122","CVE-2021-2471","CVE-2021-25122","CVE-2021-25329","CVE-2021-29505","CVE-2021-30640","CVE-2021-33037","CVE-2021-33813","CVE-2021-35515","CVE-2021-35516","CVE-2021-35517","CVE-2021-36090","CVE-2021-3629","CVE-2021-3642","CVE-2021-3644","CVE-2021-3807","CVE-2021-38153","CVE-2021-3859","CVE-2021-40690","CVE-2021-41079","CVE-2021-41766","CVE-2021-4178","CVE-2021-42340","CVE-2021-42550","CVE-2021-43797","CVE-2021-43859","CVE-2022-0084","CVE-2022-1259","CVE-2022-1319","CVE-2022-21363","CVE-2022-21724","CVE-2022-22932","CVE-2022-22950","CVE-2022-22968","CVE-2022-22970","CVE-2022-22971","CVE-2022-22976","CVE-2022-22978","CVE-2022-23181","CVE-2022-23221","CVE-2022-23596","CVE-2022-23913","CVE-2022-24614","CVE-2022-25845","CVE-2022-26336","CVE-2022-26520","CVE-2022-30126"]},{"id":"openSUSE-SU-2022:0657-1","title":"Security update for nodejs12","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"SUSE-SU-2023:2575-1","title":"Security update for SUSE Manager Client Tools","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2022-0155","CVE-2022-27664","CVE-2022-31097","CVE-2022-31107","CVE-2022-32149","CVE-2022-35957","CVE-2022-36062","CVE-2023-1387","CVE-2023-1410"]},{"id":"RHSA-2023:3742","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.13.0 security and bug fix update","vulnerabilityIds":["CVE-2020-16250","CVE-2020-16251","CVE-2021-3765","CVE-2021-3807","CVE-2021-4235","CVE-2021-4238","CVE-2021-43998","CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2022-2879","CVE-2022-2880","CVE-2022-3517","CVE-2022-21824","CVE-2022-23540","CVE-2022-23541","CVE-2022-27664","CVE-2022-30635","CVE-2022-32189","CVE-2022-32190","CVE-2022-38149","CVE-2022-38900","CVE-2022-41316","CVE-2022-41715","CVE-2022-41717","CVE-2022-41723","CVE-2022-41724","CVE-2022-41725","CVE-2022-46175","CVE-2023-0620","CVE-2023-0665","CVE-2023-24999","CVE-2023-25000"]},{"id":"RHSA-2022:0350","title":"Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2020-7788","CVE-2020-28469","CVE-2021-3807","CVE-2021-3918","CVE-2021-22959","CVE-2021-22960","CVE-2021-33502","CVE-2021-37701","CVE-2021-37712"]},{"id":"NCSC-2026-0034","title":"Kwetsbaarheden verholpen in Atlassian producten","vulnerabilityIds":["CVE-2021-3807","CVE-2022-25883","CVE-2022-45693","CVE-2024-21538","CVE-2024-38286","CVE-2024-45296","CVE-2024-45801","CVE-2025-12383","CVE-2025-15284","CVE-2025-27152","CVE-2025-41249","CVE-2025-48976","CVE-2025-48989","CVE-2025-49146","CVE-2025-52434","CVE-2025-52999","CVE-2025-53689","CVE-2025-54988","CVE-2025-55163","CVE-2025-55752","CVE-2025-64775","CVE-2025-66516","CVE-2025-9287","CVE-2025-9288","CVE-2026-21569"]},{"id":"SUSE-SU-2022:0531-1","title":"Security update for nodejs12","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"RHSA-2021:5171","title":"Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2020-7788","CVE-2020-28469","CVE-2021-3807","CVE-2021-3918","CVE-2021-22959","CVE-2021-22960","CVE-2021-33502"]},{"id":"SUSE-SU-2022:0704-1","title":"Security update for nodejs8","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]},{"id":"SUSE-SU-2024:0487-1","title":"Security update for SUSE Manager Client Tools","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2021-43798","CVE-2021-43815","CVE-2022-0155","CVE-2022-41715"]},{"id":"RHSA-2022:0041","title":"Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update","vulnerabilityIds":["CVE-2021-3807","CVE-2021-3918","CVE-2021-22959","CVE-2021-22960","CVE-2021-37701","CVE-2021-37712"]},{"id":"RHSA-2022:6595","title":"Red Hat Security Advisory: nodejs and nodejs-nodemon security and bug fix update","vulnerabilityIds":["CVE-2020-7788","CVE-2020-28469","CVE-2021-3807","CVE-2021-33502","CVE-2022-29244","CVE-2022-32212","CVE-2022-32213","CVE-2022-32214","CVE-2022-32215","CVE-2022-33987"]},{"id":"WID-SEC-W-2023-0809","title":"IBM QRadar SIEM: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-22809","CVE-2022-4883","CVE-2022-46364","CVE-2022-46363","CVE-2022-45143","CVE-2022-42890","CVE-2022-4254","CVE-2022-42252","CVE-2022-41966","CVE-2022-41946","CVE-2022-41704","CVE-2022-40156","CVE-2022-40155","CVE-2022-40154","CVE-2022-40153","CVE-2022-40152","CVE-2022-40150","CVE-2022-40149","CVE-2022-37603","CVE-2022-37601","CVE-2022-37599","CVE-2022-37598","CVE-2022-3676","CVE-2022-36364","CVE-2022-36033","CVE-2022-34917","CVE-2022-31197","CVE-2022-31129","CVE-2022-2964","CVE-2022-28733","CVE-2022-2795","CVE-2022-25927","CVE-2022-25901","CVE-2022-25758","CVE-2022-25647","CVE-2022-24999","CVE-2022-24839","CVE-2022-24823","CVE-2022-24785","CVE-2022-23437","CVE-2022-22971","CVE-2022-22970","CVE-2022-21724","CVE-2022-21628","CVE-2022-21626","CVE-2022-21624","CVE-2022-21619","CVE-2021-43797","CVE-2021-42740","CVE-2021-42581","CVE-2021-39227","CVE-2021-3918","CVE-2021-3807","CVE-2021-37713","CVE-2021-37712","CVE-2021-37701","CVE-2021-3765","CVE-2021-37137","CVE-2021-37136","CVE-2021-32804","CVE-2021-32803","CVE-2021-29060","CVE-2021-26401","CVE-2021-25220","CVE-2021-23450","CVE-2021-23382","CVE-2021-23368","CVE-2021-23364","CVE-2021-23362","CVE-2021-23343","CVE-2021-21409","CVE-2021-21295","CVE-2021-21290","CVE-2020-7764","CVE-2020-5259","CVE-2020-24025","CVE-2020-15366","CVE-2020-13936","CVE-2019-6286","CVE-2019-6284","CVE-2019-6283","CVE-2019-10785","CVE-2018-8036","CVE-2018-20821","CVE-2018-20190","CVE-2018-19839","CVE-2018-19838","CVE-2018-19827","CVE-2018-19797","CVE-2018-15494","CVE-2018-11698","CVE-2018-11694"]},{"id":"RHSA-2022:5555","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.1] security, bug fix and update","vulnerabilityIds":["CVE-2021-3807","CVE-2021-22096","CVE-2021-33623","CVE-2021-35515","CVE-2021-35516","CVE-2021-35517","CVE-2021-36090","CVE-2022-22950","CVE-2022-31051"]},{"id":"WID-SEC-W-2022-1375","title":"JFrog Artifactory: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2013-4517","CVE-2013-7285","CVE-2014-0107","CVE-2014-0114","CVE-2014-3577","CVE-2014-3623","CVE-2015-0227","CVE-2015-2575","CVE-2015-3253","CVE-2015-4852","CVE-2015-7940","CVE-2016-10750","CVE-2016-3092","CVE-2016-3674","CVE-2016-6501","CVE-2016-8735","CVE-2016-8745","CVE-2017-1000487","CVE-2017-15095","CVE-2017-17485","CVE-2017-18214","CVE-2017-18640","CVE-2017-7525","CVE-2017-7657","CVE-2017-7957","CVE-2017-9506","CVE-2018-1000206","CVE-2018-9116","CVE-2019-10219","CVE-2019-12402","CVE-2019-17359","CVE-2019-17571","CVE-2019-20104","CVE-2020-11996","CVE-2020-13934","CVE-2020-13935","CVE-2020-13949","CVE-2020-14340","CVE-2020-15586","CVE-2020-1745","CVE-2020-17521","CVE-2020-25649","CVE-2020-28500","CVE-2020-29582","CVE-2020-36518","CVE-2020-7226","CVE-2020-7692","CVE-2020-8203","CVE-2021-13936","CVE-2021-21290","CVE-2021-22060","CVE-2021-22112","CVE-2021-22119","CVE-2021-22147","CVE-2021-22148","CVE-2021-22149","CVE-2021-22573","CVE-2021-23337","CVE-2021-25122","CVE-2021-26291","CVE-2021-27568","CVE-2021-29505","CVE-2021-30129","CVE-2021-33037","CVE-2021-35550","CVE-2021-35556","CVE-2021-35560","CVE-2021-35561","CVE-2021-35564","CVE-2021-35565","CVE-2021-35567","CVE-2021-35578","CVE-2021-35586","CVE-2021-35588","CVE-2021-35603","CVE-2021-36374","CVE-2021-3765","CVE-2021-3807","CVE-2021-38561","CVE-2021-3859","CVE-2021-41090","CVE-2021-41091","CVE-2021-42340","CVE-2021-42550","CVE-2021-43797","CVE-2022-0536","CVE-2022-22963","CVE-2022-23632","CVE-2022-23648","CVE-2022-23806","CVE-2022-24769","CVE-2022-24823","CVE-2022-27191","CVE-2022-29153","CVE-2022-32212","CVE-2022-32213","CVE-2022-32214","CVE-2022-32215","CVE-2022-32223"]},{"id":"openSUSE-SU-2024:12723-1","title":"grafana-9.3.6-1.1 on GA media","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2022-0155","CVE-2022-27664","CVE-2022-32149"]},{"id":"SUSE-SU-2023:2578-1","title":"Security update for SUSE Manager Client Tools","vulnerabilityIds":["CVE-2020-7753","CVE-2021-3807","CVE-2021-3918","CVE-2021-43138","CVE-2022-0155","CVE-2022-27664","CVE-2022-31097","CVE-2022-31107","CVE-2022-32149","CVE-2022-35957","CVE-2022-36062","CVE-2022-41715","CVE-2022-46146","CVE-2023-1387","CVE-2023-1410"]},{"id":"RHSA-2022:4711","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update","vulnerabilityIds":["CVE-2021-3807","CVE-2021-23425","CVE-2021-33502","CVE-2021-41182","CVE-2021-41183","CVE-2021-41184"]},{"id":"SUSE-SU-2022:0715-1","title":"Security update for nodejs14","vulnerabilityIds":["CVE-2021-23343","CVE-2021-32803","CVE-2021-32804","CVE-2021-3807","CVE-2021-3918"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2021-2021","identifiers":["EUVD-2021-2021","CVE-2021-3807","GHSA-93q8-gq69-wqmw"]},"retained":false,"historicalAffected":[]},{"revision":"37b3405e0f4744a4aab5c004b01a4461","observedAt":"2026-10-24T18:17:33.371+00:00","statement":{"source":"nvd","id":"CVE-2021-3807","aliases":[],"title":"ansi-regex is vulnerable to Inefficient Regular Expression Complexity","description":"ansi-regex is vulnerable to Inefficient Regular Expression Complexity","state":0,"publishedAt":"2021-09-17T07:15:09.273+00:00","modifiedAt":"2026-10-08T22:17:11.557+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"},{"system":"CVSS 3.0 · security@huntr.dev · Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"},{"system":"CVSS 2.0 · nvd@nist.gov · Primary","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","score":7.8,"severity":"HIGH"}],"references":["https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9","https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994","https://security.netapp.com/advisory/ntap-20221014-0002/","https://www.oracle.com/security-alerts/cpuapr2022.html"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-3807","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-1333"],"productCriteria":["cpe:2.3:a:ansi-regex_project:ansi-regex:*:*:*:*:*:node.js:*:*","cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.0:*:*:*:*:node.js:*:*","cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.0:*:*:*:*:node.js:*:*","cpe:2.3:a:ansi-regex_project:ansi-regex:6.0.0:*:*:*:*:node.js:*:*","cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*"],"sourceDates":{"published":"2021-09-17T07:15:09.273","lastModified":"2026-10-08T22:17:11.557"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2021-3807","identifiers":["CVE-2021-3807"]},"retained":false,"historicalAffected":[]},{"revision":"c7caa07d3cff4ad58fda84b0aa596589","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"GHSA-93q8-gq69-wqmw","aliases":["CVE-2021-3807"],"title":"Inefficient Regular Expression Complexity in chalk/ansi-regex","description":"ansi-regex is vulnerable to Inefficient Regular Expression Complexity which could lead to a denial of service when parsing invalid ANSI escape codes.\n\n**Proof of Concept**\n```js\nimport ansiRegex from 'ansi-regex';\nfor(var i = 1; i <= 50000; i++) {\n    var time = Date.now();\n    var attack_str = \"\\u001B[\"+\";\".repeat(i*10000);\n    ansiRegex().test(attack_str)\n    var time_cost = Date.now() - time;\n    console.log(\"attack_str.length: \" + attack_str.length + \": \" + time_cost+\" ms\")\n}\n```\nThe ReDOS is mainly due to the sub-patterns `[[\\\\]()#;?]*` and `(?:;[-a-zA-Z\\\\d\\\\/#&.:=?%@~_]*)*`","state":0,"publishedAt":"2021-09-20T20:20:09+00:00","modifiedAt":"2026-09-10T03:49:08.5702656+00:00","affected":[{"ecosystem":"npm","name":"ansi-regex","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"6.0.0"},{"kind":"fixed","version":"6.0.1"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"npm","name":"ansi-regex","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"5.0.0"},{"kind":"fixed","version":"5.0.1"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"npm","name":"ansi-regex","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.0.0"},{"kind":"fixed","version":"4.1.1"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"npm","name":"ansi-regex","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.0.0"},{"kind":"fixed","version":"3.0.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-3807","https://github.com/chalk/ansi-regex/issues/38#issuecomment-924086311","https://github.com/chalk/ansi-regex/issues/38#issuecomment-925924774","https://github.com/chalk/ansi-regex/commit/419250fa510bf31b4cc672e76537a64f9332e1f1","https://github.com/chalk/ansi-regex/commit/75a657da7af875b2e2724fd6331bf0a4b23d3c9a","https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9","https://github.com/chalk/ansi-regex/commit/c3c0b3f2736b9c01feec0fef33980c43720dcde8","https://app.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908","https://github.com/chalk/ansi-regex","https://github.com/chalk/ansi-regex/releases/tag/v6.0.1","https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994","https://security.netapp.com/advisory/ntap-20221014-0002","https://www.oracle.com/security-alerts/cpuapr2022.html"],"sourceUrl":"https://github.com/advisories/GHSA-93q8-gq69-wqmw","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-93q8-gq69-wqmw","identifiers":["GHSA-93q8-gq69-wqmw","CVE-2021-3807"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T15:24:08.8188023+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T15:24:08.8188023+00:00","lastSuccessAt":"2026-11-10T15:24:08.9790817+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:24:08.9790869+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-a0960c299e2dafbb2e8450fb21550287bc0c3b97298514596ae2b1697fb7bc3b","complete":true,"records":422070,"lastAttemptAt":"2026-11-10T15:21:29.3452518+00:00","lastSuccessAt":"2026-11-10T15:21:29.2151501+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:21:29.3452518+00:00","snapshotPublishedAt":"2026-11-10T14:23:49+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-efc28183efe04e138ba7d91d47b051d0","complete":true,"records":13691,"lastAttemptAt":"2026-11-10T15:25:10.8168504+00:00","lastSuccessAt":"2026-11-10T13:22:39.879+00:00","error":null,"lastVerifiedAt":"2026-11-10T13:22:39.879+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13744,"expectedIdentifiers":13744,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T15:24:08.8188023+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T15:24:08.8188023+00:00","lastSuccessAt":"2026-11-10T15:24:08.9798315+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:24:08.9798317+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-738cd6499f9748c9890b05108858c833","complete":false,"records":13697,"lastAttemptAt":"2026-11-10T15:25:10.154636+00:00","lastSuccessAt":"2026-11-10T15:25:10.15+00:00","error":"100 identifier lookups failed; latest failures include request timeout. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-10T15:25:10.15+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13142,"expectedIdentifiers":13744,"failedIdentifiers":100},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T15:24:08.6813477+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:24:08.6813477+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T15:21:29.495451+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:21:29.495451+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-df497239f2f75af38e095cb498791dad4044a8a9a7f5f0ee6008bb732579ab9d","complete":true,"records":3081,"lastAttemptAt":"2026-11-10T15:24:08.7869291+00:00","lastSuccessAt":"2026-11-10T14:21:34.3717399+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:24:08.7869291+00:00","snapshotPublishedAt":"2026-11-10T14:18:07+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-db2f6ba81f9ad8cbb9260cd64e408b90232da96003174aeed666a4ce1c7aabd5","complete":true,"records":231599,"lastAttemptAt":"2026-11-10T15:24:08.5102562+00:00","lastSuccessAt":"2026-11-10T15:24:05.6823404+00:00","error":null,"lastVerifiedAt":"2026-11-10T15:24:08.5102562+00:00","snapshotPublishedAt":"2026-11-10T14:33:27+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}