Most recent entries from all

bdu:2023-07555

cnvd-2019-01875

EUVD-2026-184455

fkie_cve-2017-16114

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

GHSA-x5pg-88wf-qq4p — Regular Expression Denial of Service in marked

Affected: npm: marked

Affected versions of `marked` are vulnerable to a regular expression denial of service.

The amplification in this vulnerability is significant, with 1,000 characters resulting in the event loop being blocked for around 6 seconds.

## Recommendation

Update to version 0.3.9 or later.

gsd-2017-16114

UBUNTU-CVE-2017-16114

Affected: Ubuntu:16.04:LTS: node-marked

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.