The project relies on colors.js with malicious code

[shijiatongxue]

Current behavior

• Bugs when run cypress cli

It's a known bug of colors

bugs here

• cypress dependency

Desired behavior

everything is ok when run cypress

Test code to reproduce

run it MAY BE DANGER on local machine: npx cypress run

Cypress Version

9.2.0

Other

No response

[tzimmermann]

You can already upgrade cli-table3 to 0.6.1 in your lockfile to fix this.
They've released a fix with a pinned dep to colors@1.4.0.
cli-table/cli-table3#251

[jennifer-shehane]

There’s a PR open to fix this. #19622 As mentioned above you can update the cli-table-3 dependency already to avoid this issue.

[cypress-bot]

The code for this is done in cypress-io/cypress#19622, but has yet to be released.
We'll update this issue and reference the changelog when it's released.

[cypress-bot]

Released in 9.2.1.

This comment thread has been locked. If you are still experiencing this issue after upgrading to
Cypress v9.2.1, please open a new issue.