Description
All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | trim-off-newlines | < unspecified | unspecified |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 4 | ovirt-engine-ui-extensions | 1.3.3-1.el8ev | RHSA-2022:4711 |
| Red Hat Rhev Manager 4 | ovirt-web-ui | 1.8.1-2.el8ev | RHSA-2022:4711 |
| Red Hat Rhev Manager 4 | rhvm +19 | 4.5.0.7-0.9.el8ev | RHSA-2022:4711 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | trim-off-newlines | < 1.0.3 | 1.0.3 | GHSA-38fc-wpqx-33j7 |
Advisories 1
- RHSA-2022:4711 Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update Red Hat Security Advisories (RHSA) · Oct 14, 2026