GHSA-ch52-vgq2-943f
GHSA-ch52-vgq2-943f · Regular Expression Denial of Service in marked
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Affected versions of `marked` are vulnerable to Regular Expression Denial of Service (ReDoS). The `_label` subrule may significantly degrade parsing performance of malformed input. ## Recommendation Upgrade to version 0.7.0 or later.
Fix available
- Published
- Updated
Stack: node
Affected products and versions
marked npm
- Affected ranges
- SEMVER: ≥ 0.4.0, < 0.7.0
Update to 0.7.0