Marked ReDoS due to email addresses being evaluated in quadratic time

概要

参考情報

• markedjs/marked#1460 · WEB
• markedjs/marked commit b15e42b · WEB
• markedjs/marked · PACKAGE
• markedjs/marked release v0.6.2 · WEB
• snyk.io/vuln/SNYK-JS-MARKED-174116 · WEB
• npmjs.com/advisories/812 · WEB

marked のその他の脆弱性

• CVE-2026-41680高 7.5Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By provi…
• CVE-2018-25110高 7.5Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in se…
• CVE-2022-21681高 7.5Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic back…
• CVE-2022-21680高 7.5Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking ag…
• CVE-2021-21306高 7.5Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there i…