Lucene search
+L

245 matches found

nodejs
nodejs
added 2021/06/07 10:13 p.m.124 views

Regular Expression Denial of Service

Overview trim-newlines before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method. Recommendation Upgrade to versions 3.0.1 or 4.0.1 or later References - CVE - GitHub Advisory...

5CVSS5.7AI score0.02901EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2021/06/07 10:10 p.m.204 views

Uncontrolled Resource Consumption in trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.5AI score0.02901EPSS
SaveExploits0References8Affected Software1
vulnersOsv
vulnersOsv
added 2021/06/07 10:10 p.m.6 views

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0126af95c0e2d9b0a7c78738c4c00a860b04acc8 (>=0.0.0 <=1.0.0) +49677 more potentially affected by CVE-2021-33623 via trim-newlines (>=1.0.0 <=3.0.0)

trim-newlines NPM version =1.0.0, =1.0.1, =0.0.0, =1.0.0, =1.0.4, =1.0.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-33623 Source advisory: OSV:GHSA-7P7H-4MM5-852V...

7.5CVSS7.1AI score0.02901EPSS
SaveExploits0
OSV
OSV
added 2021/06/07 10:10 p.m.12 views

GHSA-7P7H-4MM5-852V Uncontrolled Resource Consumption in trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02901EPSS
SaveExploits0References8
CNVD
CNVD
added 2021/06/02 12:0 a.m.12 views

Unspecified vulnerability in Joyent trim-newlines

trim-newlines is an npm package that modifies line breaks. A security vulnerability exists in Joyent trim-newlines, which stems from an issue related to the .end method as applied to Node.js in versions 3.0.1 and 4.0.1 and earlier. No details of the vulnerability are available at this time...

7.5CVSS6.6AI score0.02901EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2021/06/01 2:19 p.m.45 views

CVE-2021-33623

A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS2.2AI score0.02901EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2021/06/01 1:24 p.m.4 views

nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions

A flaw was found in nodejs-lodash. A Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions is possible...

5.3CVSS6.8AI score0.07336EPSS
SaveExploits1References5
Veracode
Veracode
added 2021/05/31 5:29 a.m.41 views

Regular Expression Denial Of Service (ReDoS)

trim-newlines is vulnerable to Regular Expression Denial Of Service ReDoS. The usage of an insecure regular expression in the .end method allows an attacker to cause excessive resource consumption...

7.5CVSS7.2AI score0.02901EPSS
SaveExploits0References5Affected Software3
OSV
OSV
added 2021/05/28 6:15 p.m.1 views

DEBIAN-CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.5AI score0.02901EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/28 6:15 p.m.35 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score
SaveExploits0References4
NVD
NVD
added 2021/05/28 6:15 p.m.17 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS0.02901EPSS
SaveExploits0References4
Prion
Prion
added 2021/05/28 6:15 p.m.23 views

Design/Logic Flaw

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

5CVSS7.4AI score0.02901EPSS
SaveExploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/05/28 6:15 p.m.5 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02901EPSS
SaveExploits0References5
OSV
OSV
added 2021/05/28 6:15 p.m.6 views

UBUNTU-CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02901EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/05/28 6:15 p.m.35 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.02901EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/05/28 12:0 a.m.6 views

PT-2021-20234

Name of the Vulnerable Software and Affected Versions: trim-newlines versions 3.0.0 and earlier, 4.x before 4.0.1 Description: The issue is related to regular expression denial-of-service ReDoS for the .end method. This can cause a denial-of-service condition. Recommendations: For versions 3.0.0...

7.5CVSS7.4AI score0.02901EPSS
SaveExploits0References20
Cvelist
Cvelist
added 2021/05/28 12:0 a.m.26 views

CVE-2021-33623

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.8AI score0.02901EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/28 12:0 a.m.8 views

trim-newlines 资源管理错误漏洞

trim-newlines is an npm package that modifies line breaks. A security vulnerability exists in Joyent trim-newlines, which stems from an issue related to the .end method as applied to Node.js in versions 3.0.1 and 4.0.1 and earlier. No details of the vulnerability are available at this time...

7.5CVSS7.7AI score0.02901EPSS
SaveExploits0References12
CVE
CVE
added 2021/05/28 12:0 a.m.262 views

CVE-2021-33623

CVE-2021-33623 : The trim-newlines package for Node.js is vulnerable to a regular-expression Denial of Service (ReDoS) on the .end() method. Affected versions are before 3.0.1 and 4.x before 4.0.1. Remedies include upgrading to trim-newlines 3.0.1 or 4.0.1 (or later). The available connected docu...

7.5CVSS7.4AI score0.02901EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2021/05/26 2:42 p.m.3 views

Regular Expression Denial of Service (ReDoS)

Overview trim-off-newlines is a Similar to Stringtrim but removes only newlines Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via string processing. PoC const trim = require'trim-off-newlines'; for let i=10; i 25; i += 1 const s = 'a' + "rn".repeat...

5.3CVSS6.7AI score0.01927EPSS
SaveExploits1References2
Rows per page
Query Builder