GitHub Advisoryadvisory · npm

GHSA-7p7h-4mm5-852v Uncontrolled Resource Consumption in trim-newlines

HIGH Published 2021-06-07 Modified 2023-09-08 Official page ↗
Aliases
CVE-2021-33623
Ecosystem
npm
Packages
trim-newlines
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-06-01

Affected packages

• npm trim-newlines: < 3.0.1 → fixed in 3.0.1 • npm trim-newlines: >= 4.0.0, < 4.0.1 → fixed in 4.0.1

Description

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the `.end()` method.

Related

Alias · CVE (1)

  • CVE-2021-33623 The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References