Multiple Content Injection Vulnerabilities in marked

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2014-1850 · ADVISORY
• npmjs.com/advisories/22 · WEB
• openwall.com/lists/oss-security/2014/05/13/1 · Mailing List
• openwall.com/lists/oss-security/2014/05/15/2 · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• nodesecurity.io/advisories/marked_multiple_content_injection_vulnerabilities · Broken Link

marked のその他の脆弱性

• CVE-2026-41680高 7.5Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By provi…
• CVE-2018-25110高 7.5Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in se…
• CVE-2022-21681高 7.5Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic back…
• CVE-2022-21680高 7.5Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking ag…
• CVE-2021-21306高 7.5Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there i…