Uncontrolled Resource Consumption in trim-off-newlines

Description

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

Recommendation

Update the trim-off-newlines package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.0.3
• Patched version(s): 1.0.3

References

• GHSA-38fc-wpqx-33j7
• snyk.io
• CVE-2021-23425
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Uncontrolled Resource Consumption in trim-newlines - CVE-2021-33623
• Uncontrolled Resource Consumption in ansi-html - CVE-2021-23424
• Uncontrolled Resource Consumption in transpile - CVE-2021-23429
• graphql Uncontrolled Resource Consumption vulnerability - CVE-2023-26144

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

trim-off-newlines