| Package | Affected versions | Patched versions |
|---|---|---|
| marked | ≥ 0.3.14, < 0.6.2 | 0.6.2 |
Versions of marked from 0.3.14 until 0.6.2 are vulnerable to Regular Expression Denial of Service. Email addresses may be evaluated in quadratic time, allowing attackers to potentially crash the node process due to resource exhaustion.
Upgrade to version 0.6.2 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free