CVE-2021-3377

Name of the Vulnerable Software and Affected Versions: ansi up versions prior to 5.0.0

Description: The npm package ansi up is affected by a cross-site scripting (XSS) vulnerability due to insufficient URL sanitization when converting ANSI escape codes into HTML. This issue allows ANSI escape codes to create HTML hyperlinks.

Recommendations: For versions prior to 5.0.0, update to version 5.0.0 to resolve the issue. As a temporary workaround, consider disabling the feature that allows ANSI escape codes to create HTML hyperlinks until the update is applied.