Regular Expression Denial of Service in marked

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-16114 · ADVISORY
• chjj/marked · WEB
• GitHub Advisory GHSA-x5pg-88wf-qq4p · ADVISORY
• npmjs.com/advisories/531 · WEB
• nodesecurity.io/advisories/531 · Third Party Advisory

marked のその他の脆弱性

• CVE-2026-41680高 7.5Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By provi…
• CVE-2018-25110高 7.5Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in se…
• CVE-2022-21681高 7.5Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic back…
• CVE-2022-21680高 7.5Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking ag…
• CVE-2021-21306高 7.5Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there i…