The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Affected: npm: trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the `.end()` method.

openssl: SM2 Decryption Buffer Overflow openssl: Read buffer overruns processing ASN.1 strings nodejs-axios: Regular expression denial of service in trim function nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name redis: Lua scripts can overflow the heap-based Lua stack redis: Integer overflow issue with Streams redis: Integer overflow bug in the ziplist data structure redis: Out of bounds read in lua debugger protocol parser redis: Denial of service via Redis Standard Protocol (RESP) request redis: Integer overflow issue with intsets helm: information disclosure vulnerability nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite nodejs-trim-newlines: ReDoS in .end() method redis: Integer overflow issue with strings

Affected: Ubuntu:18.04:LTS: node-trim-newlines, Ubuntu:20.04:LTS: node-trim-newlines, Ubuntu:24.04:LTS: node-trim-newlines, Ubuntu:25.10: node-trim-newlines, Ubuntu:26.04:LTS: node-trim-newlines

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Virtualization ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.