Lucene search
K

223 matches found

vulnersOsv
vulnersOsv
added 2021/06/07 10:10 p.m.4 views

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0126af95c0e2d9b0a7c78738c4c00a860b04acc8 (>=0.0.0 <=1.0.0) +49760 more potentially affected by CVE-2021-33623 via trim-newlines (>=1.0.0 <=3.0.0)

trim-newlines NPM version =1.0.0, =1.0.1, =0.0.0, =1.0.0, =1.0.4, =1.0.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-33623 Source advisory: OSV:GHSA-7P7H-4MM5-852V...

7.5CVSS7.2AI score0.02846EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2021/06/07 10:10 p.m.195 views

Uncontrolled Resource Consumption in trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.5AI score0.02846EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/06/07 10:10 p.m.0 views

GHSA-7P7H-4MM5-852V Uncontrolled Resource Consumption in trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02846EPSS
Exploits0References8
CNVD
CNVD
added 2021/06/02 12:0 a.m.8 views

Unspecified vulnerability in Joyent trim-newlines

trim-newlines is an npm package that modifies line breaks. A security vulnerability exists in Joyent trim-newlines, which stems from an issue related to the .end method as applied to Node.js in versions 3.0.1 and 4.0.1 and earlier. No details of the vulnerability are available at this time...

7.5CVSS6.6AI score0.02846EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2021/06/01 2:19 p.m.41 views

CVE-2021-33623

A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS2.2AI score0.02846EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2021/06/01 1:24 p.m.0 views

nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions

A flaw was found in nodejs-lodash. A Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions is possible...

5.3CVSS6.8AI score0.07336EPSS
Exploits1References5
Veracode
Veracode
added 2021/05/31 5:29 a.m.38 views

Regular Expression Denial Of Service (ReDoS)

trim-newlines is vulnerable to Regular Expression Denial Of Service ReDoS. The usage of an insecure regular expression in the .end method allows an attacker to cause excessive resource consumption...

7.5CVSS7.2AI score0.02846EPSS
Exploits0References5Affected Software3
OSV
OSV
added 2021/05/28 6:15 p.m.1 views

DEBIAN-CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.5AI score0.02846EPSS
Exploits0References1
NVD
NVD
added 2021/05/28 6:15 p.m.14 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS0.02846EPSS
Exploits0References4
OSV
OSV
added 2021/05/28 6:15 p.m.31 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2021/05/28 6:15 p.m.32 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02846EPSS
Exploits0References4
Prion
Prion
added 2021/05/28 6:15 p.m.21 views

Design/Logic Flaw

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

5CVSS7.4AI score0.02846EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2021/05/28 6:15 p.m.1 views

UBUNTU-CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02846EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/05/28 12:0 a.m.4 views

trim-newlines 资源管理错误漏洞

trim-newlines is an npm package that modifies line breaks. A security vulnerability exists in Joyent trim-newlines, which stems from an issue related to the .end method as applied to Node.js in versions 3.0.1 and 4.0.1 and earlier. No details of the vulnerability are available at this time...

7.5CVSS7.7AI score0.02846EPSS
Exploits0References12
CVE
CVE
added 2021/05/28 12:0 a.m.245 views

CVE-2021-33623

CVE-2021-33623 : The trim-newlines package for Node.js is vulnerable to a regular-expression Denial of Service (ReDoS) on the .end() method. Affected versions are before 3.0.1 and 4.x before 4.0.1. Remedies include upgrading to trim-newlines 3.0.1 or 4.0.1 (or later). The available connected docu...

7.5CVSS7.4AI score0.02846EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2021/05/28 12:0 a.m.18 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.8AI score0.02846EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/05/28 12:0 a.m.4 views

PT-2021-20234

Name of the Vulnerable Software and Affected Versions: trim-newlines versions 3.0.0 and earlier, 4.x before 4.0.1 Description: The issue is related to regular expression denial-of-service ReDoS for the .end method. This can cause a denial-of-service condition. Recommendations: For versions 3.0.0...

7.5CVSS7.4AI score0.02846EPSS
Exploits0References20
Snyk
Snyk
added 2021/05/26 2:42 p.m.1 views

Regular Expression Denial of Service (ReDoS)

Overview trim-off-newlines is a Similar to Stringtrim but removes only newlines Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via string processing. PoC const trim = require'trim-off-newlines'; for let i=10; i 25; i += 1 const s = 'a' + "rn".repeat...

5.3CVSS6.7AI score0.01927EPSS
Exploits1References2
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/05/17 7:27 a.m.656 views

EFB Tampering 3. Take-off pt2

Take-off Performance Part 2: Flap, Trim, Database and Sources of Data Target: FLAP SETTING There are various forms of flaps and slats. The difference between the two and the technicalities of how they work is outside the scope of this blog. As a general rule flaps extend from the rear/trailing ed...

6.8AI score
Exploits0
Node.js
Node.js
added 2021/05/10 6:48 p.m.93 views

Regular Expression Denial of Service in trim

Overview Versions of trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service ReDoS via trim. Recommendation Upgrade to version 0.0.3 or later References - CVE - GitHub Advisory...

5CVSS5.8AI score0.03732EPSS
Exploits1Affected Software1
Rows per page
Query Builder