This repository has been archived by the owner on Jul 21, 2023. It is now read-only.
CVE-2020-7753 (High) detected in trim-0.0.1.tgz #1179
Labels
Mend: dependency security vulnerability
Security vulnerability detected by WhiteSource
CVE-2020-7753 - High Severity Vulnerability
Vulnerable Library - trim-0.0.1.tgz
Trim string whitespace
Library home page: https://registry.npmjs.org/trim/-/trim-0.0.1.tgz
Dependency Hierarchy:
Found in HEAD commit: 63bdcc254e4f79ed8aca650620a1d185cb267336
Found in base branch: master
Vulnerability Details
All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().
Publish Date: 2020-10-27
URL: CVE-2020-7753
CVSS 3 Score Details (7.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2020-10-27
Fix Resolution (trim): 0.0.3
Direct dependency fix Resolution (stylelint): 13.3.1
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: