What’s Vulnerable › Vulnerabilities

CVE-2021-33623

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-28 · updated 2026-06-17
• Weakness: CWE-400

Description

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Affected products

• Debian Linux: 10.0
• NetApp E-Series Performance Analyzer: all versions
• Trim-Newlines Project Trim-Newlines: before 3.0.1; from 4.0.0 before 4.0.1 — fixed in 3.0.1, 4.0.1

How to fix

Upgrade to a fixed version: Trim-Newlines Project Trim-Newlines 3.0.1, 4.0.1. Check the vendor advisory for mitigations.

References

• https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1
• https://lists.debian.org/debian-lts-announce/2022/12/msg00033.html
• https://security.netapp.com/advisory/ntap-20210702-0007/
• https://www.npmjs.com/package/trim-newlines
• https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1
• https://lists.debian.org/debian-lts-announce/2022/12/msg00033.html
• https://security.netapp.com/advisory/ntap-20210702-0007/
• https://www.npmjs.com/package/trim-newlines

Get alerted when CVE-2021-33623 or the next vulnerability affects your stack