| Package | Affected versions | Patched versions |
|---|---|---|
| marked | < 0.3.9 | 0.3.9 |
| marked | < 0.3.9 | 0.3.9 |
Affected versions of marked are vulnerable to a regular expression denial of service.
The amplification in this vulnerability is significant, with 1,000 characters resulting in the event loop being blocked for around 6 seconds.
Update to version 0.3.9 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free