{"action":"Upgrade trim to 0.0.3 or later.","affected":[{"fixed":"0.0.3","introduced":"0"}],"component":"trim","cve_ids":["CVE-2020-7753"],"ecosystem":"npm","epss":0.03777,"exploited":false,"fixed_versions":["0.0.3"],"ghsa_id":"GHSA-w5p7-h5w8-2hfq","id":"tcs_01M5KGE2H84CF6KPX75HJZCK70","modified_at":"2023-11-08T04:04:08.561494Z","published_at":"2021-05-10T18:44:22Z","references":["https://osv.dev/vulnerability/GHSA-w5p7-h5w8-2hfq","https://nvd.nist.gov/vuln/detail/CVE-2020-7753","https://github.com/component/trim/pull/8","https://github.com/component/trim","https://github.com/component/trim/blob/master/index.js","https://github.com/component/trim/blob/master/index.js%23L6","https://lists.apache.org/thread.html/r10faad1ef9166d37a1a5c9142b1af7099b8ecdc5ad05c51b8ea993d9@%3Ccommits.airflow.apache.org%3E","https://lists.apache.org/thread.html/r51ff3c2a4c7b8402f321eae7e624672cc2295c7bc8c12c8b871f6b0b@%3Ccommits.airflow.apache.org%3E","https://lists.apache.org/thread.html/r75b8d0b88833d7d96afcdce3ead65e212572ead4e7a9f34d21040196@%3Ccommits.airflow.apache.org%3E","https://lists.apache.org/thread.html/rb8462df3b6484e778905c09cd49a8912e1a302659860017ebe36da03@%3Ccommits.airflow.apache.org%3E","https://lists.apache.org/thread.html/rcc7c2865a52b544a8e49386c6880e9b9ab29bfce1052b5569d09ee4a@%3Ccommits.airflow.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132","https://snyk.io/vuln/SNYK-JS-TRIM-1017038"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-w5p7-h5w8-2hfq","url":"https://osv.dev/vulnerability/GHSA-w5p7-h5w8-2hfq"}],"summary":"Regular Expression Denial of Service in trim"}