PT-2021-20234 · Unknown+2 · Trim-Newlines+2

Published 2021-05-28 · Updated 2026-01-23 · CVE-2021-33623

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: trim-newlines versions 3.0.0 and earlier, 4.x before 4.0.1

Description: The issue is related to regular expression denial-of-service (ReDoS) for the .end() method. This can cause a denial-of-service condition.

Recommendations: For versions 3.0.0 and earlier, update to version 3.0.1 or later. For versions 4.x before 4.0.1, update to version 4.0.1 or later. As a temporary workaround, consider disabling the .end() method until a patch is available.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-33623

DLA-3247-1

GHSA-7P7H-4MM5-852V

RHSA-2022:5555

USN-5999-1

Affected Products

Linuxmint

Ubuntu

Trim-Newlines

References · 20

• https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1 · Patch
• https://ubuntu.com/security/notices/USN-5999-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33623 · Security Note
• https://osv.dev/vulnerability/DLA-3247-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33623 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-33623 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33623 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-APP-NPM-CVE-2021-33623 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33623 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5999-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7p7h-4mm5-852v · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33623 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33623 · Security Note
• https://github.com/sindresorhus/trim-newlines/commit/25246c6ce5eea1c82d448998733a6302a4350d91 · Note
• https://github.com/sindresorhus/trim-newlines/commit/b10d5f4afef832b16bc56d49fc52c68cbd403869 · Note