Uncontrolled Resource Consumption in trim-newlines

Description

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Recommendation

Update the trim-newlines package to the latest compatible version. Followings are version details:

• Affected version(s): **= 4.0.0

  < 3.0.1**

• Patched version(s): **4.0.1

  3.0.1**

References

• GHSA-7p7h-4mm5-852v
• www.npmjs.com
• security.netapp.com
• lists.debian.org
• CVE-2021-33623
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Uncontrolled Resource Consumption in trim-off-newlines - CVE-2021-23425
• Uncontrolled Resource Consumption in transpile - CVE-2021-23429
• Uncontrolled Resource Consumption in ansi-html - CVE-2021-23424
• DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption - CVE-2026-10691

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

trim-newlines