Moderate severity vulnerability that affects marked

Description

This advisory has been withdrawn, per NVD: “This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.”

Recommendation

Update the marked package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.3.9
• Patched version(s): 0.3.9

References

• GHSA-crmx-v835-hcp4
• CVE-2017-17461
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Multiple Content Injection Vulnerabilities in marked - CVE-2014-3743
• Inefficient Regular Expression Complexity in marked - CVE-2022-21680
• jquery-validation vulnerable to Cross-site Scripting - CVE-2025-3573
• @mozilla/readability Denial of Service through Regex - CVE-2025-2792

Tags:

npm

marked