CVE-2021-23425

5.3 mediumEPSS 1.9%

Medium (5.3) in trim-off-newlines project trim-off-newlines. EPSS 1.9% chance of exploitation in the next 30 days. Fixed in trim-off-newlines 1.0.3.

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

Severity

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2021-08-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-38fc-wpqx-33j7	npm	trim-off-newlines	<1.0.3	1.0.3