~ / search / GHSA-w5p7-h5w8-2hfq

GHSA-w5p7-h5w8-2hfq

Regular Expression Denial of Service in trim

Source: GitHub Advisory Database (reviewed) High CVE-2020-7753

Packages

EcosystemPackageAffectedFixed in
npm trim < 0.0.3 0.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().

References

External links from the advisory. They lead to third-party sites.