https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:50:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-01720 bdu:2022-01720 https://cve.radiocsirt.org/vuln/bdu:2022-01720 https://cve.radiocsirt.org/vuln/certfr-2022-avi-266 certfr-2022-avi-266 https://cve.radiocsirt.org/vuln/certfr-2022-avi-266 https://cve.radiocsirt.org/vuln/cnvd-2016-02542 cnvd-2016-02542 https://cve.radiocsirt.org/vuln/cnvd-2016-02542 https://cve.radiocsirt.org/vuln/euvd-2026-96040 EUVD-2026-96040 https://cve.radiocsirt.org/vuln/euvd-2026-96040 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8854 <p>The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a &#34;catastrophic backtracking issue for the em inline rule,&#34; aka a &#34;regular expression denial of service (ReDoS).&#34;</p> <p>The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a &#34;catastrophic backtracking issue for the em inline rule,&#34; aka a &#34;regular expression denial of service (ReDoS).&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-8854 https://cve.radiocsirt.org/vuln/ghsa-hjcp-j389-59ff <p><strong>Affected:</strong> npm: marked</p> <p>Versions 0.3.3 and earlier of `marked` are affected by a regular expression denial of service ( ReDoS ) vulnerability when passed inputs that reach the `em` inline rule.</p> <p>## Recommendation</p> <p>Update to version 0.3.4 or later.</p> <p><strong>Affected:</strong> npm: marked</p> <p>Versions 0.3.3 and earlier of `marked` are affected by a regular expression denial of service ( ReDoS ) vulnerability when passed inputs that reach the `em` inline rule.</p> <p>## Recommendation</p> <p>Update to version 0.3.4 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-hjcp-j389-59ff https://cve.radiocsirt.org/vuln/gsd-2015-8854 gsd-2015-8854 https://cve.radiocsirt.org/vuln/gsd-2015-8854 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8854 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-marked</p> <p>The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a &#34;catastrophic backtracking issue for the em inline rule,&#34; aka a &#34;regular expression denial of service (ReDoS).&#34;</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-marked</p> <p>The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a &#34;catastrophic backtracking issue for the em inline rule,&#34; aka a &#34;regular expression denial of service (ReDoS).&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8854