trim-newlines 安全漏洞

漏洞信息详情

trim-newlines是一个修改换行符的npm包。

trim-newlines 存在安全漏洞，该漏洞源于应用于Node.js在3.0.1与4.0.1版本及之前版本中.end()方法存在相关问题。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1

来源:MISC

链接:https://www.npmjs.com/package/trim-newlines

来源:CONFIRM

链接:https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-33623

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2657

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3878

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Node-js-trim-newlines-overload-via-Regular-Expression-35636

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164948/Red-Hat-Security-Advisory-2021-4618-01.html

暂无