Uncontrolled Resource Consumption in trim-off-newlines

MEDIO 5.3CVE-2021-23425 · GHSA-38fc-wpqx-33j7 · Published 18/08/2021 · updated 17/06/2026

In breve

CVE-2021-23425 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda trim-off-newlines (trim-off-newlines project), trim-off-newlines.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 80.1% delle vulnerabilità.
Correzione: aggiornare a 1.0.3 o successiva.

Package	Affected versions	Patched versions
trim-off-newlines trim-off-newlines_project	`< 1.0.3`	`1.0.3`
trim-off-newlines npm	`< 1.0.3`	`1.0.3`

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

NVD description

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.