CVE-2021-33623: High severity trim-newlines vulnerability
@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
Other sources
A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-33623.
What is the severity of CVE-2021-33623?
The severity of CVE-2021-33623 is high.
How does CVE-2021-33623 affect Node.js?
CVE-2021-33623 has an issue related to regular expression denial-of-service (ReDoS) for the `.end()` method in Node.js.
Which versions of trim-newlines are affected by CVE-2021-33623?
Version 4.0.0 and versions before 4.0.1 of trim-newlines for Node.js are affected by CVE-2021-33623.
How can I fix CVE-2021-33623?
To fix CVE-2021-33623, update trim-newlines to version 4.0.1 or newer.