Moderate severity vulnerability that affects marked

Description

This advisory has been withdrawn, per NVD: “This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.”

Recommendation

Update the marked package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.3.9
• Patched version(s): 0.3.9

References

• GHSA-crmx-v835-hcp4
• CVE-2017-17461
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Moderate severity vulnerability that affects validator - CVE-2013-7451
• Moderate severity vulnerability that affects validator (GHSA-rh6c-q938-3r9q) - CVE-2013-7452
• Moderate severity vulnerability that affects validator (GHSA-552w-rqg8-gxxm) - CVE-2013-7453
• Critical severity vulnerability that affects slpjs - CVE-2019-16762

Tags:

npm

marked