Fix CVE–2021–23425

[debricked]

CVE–2021–23425

Vulnerable dependency:     trim-off-newlines (Yarn)    1.0.1

Vulnerability details

Description

NVD

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

GitHub

Uncontrolled Resource Consumption in trim-off-newlines

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

CVSS details - 5.3

 

CVSS3 metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	Low

References

    NVD - CVE-2021-23425
    Uncontrolled Resource Consumption in trim-off-newlines · CVE-2021-23425 · GitHub Advisory Database · GitHub
    THIRD PARTY
    trim-off-newlines/index.js at master · stevemao/trim-off-newlines · GitHub
    fix for CVE-2021-23425 by Trott · Pull Request #3 · stevemao/trim-off-newlines · GitHub

 

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE