CVE-2023-30858: Denosaurs Emoji

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the `replace`, `unemojify`, or `strip` functions.

Affected products

• Denosaurs Emoji: from 0.1.0, before 0.3.0 (fixed in 0.3.0)

Published 2023-04-28. Last modified 2026-06-17.