Description
Regular expression Denial of Service
A Denial of Service attack can affect anyone who runs user generated code through marked.
Recommendation
Update the marked package to the latest compatible version. Followings are version details:
- Affected version(s): >= 1.1.1, < 2.0.0
- Patched version(s): 2.0.0
References
Related Issues
- Regular Expression Denial of Service (ReDoS) in ua-parser-js - CVE-2021-27292
- Regular Expression Denial of Service (ReDoS) in jsx-slack - CVE-2021-43838
- jspdf vulnerable to Regular Expression Denial of Service (ReDoS) - CVE-2021-23353
- html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS) - html-parse-stringify - CVE-2021-23346
You might also like:
- Tags:
- npm
- marked
Anything's wrong? Let us know Last updated on February 01, 2023