GHSA-hjcp-j389-59ff
- Severity
- High
- CVSS
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CISA KEV
- Not in the cached KEV catalog
- EPSS
- No cached EPSS score
Affected and fixed versions
- Introduced 0 · fixed in 0.3.4
Plain-language text is shown only when it is already cached. This page does not generate it.
Regular Expression Denial of Service in marked
Versions 0.3.3 and earlier of `marked` are affected by a regular expression denial of service ( ReDoS ) vulnerability when passed inputs that reach the `em` inline rule. ## Recommendation Update to version 0.3.4 or later.
Aliases: CVE-2015-8854
Advisory on OSV.dev · published 2017-10-24 · modified 2024-02-09
- https://nvd.nist.gov/vuln/detail/CVE-2015-8854
- https://github.com/chjj/marked/issues/497
- https://github.com/advisories/GHSA-hjcp-j389-59ff
- https://github.com/chjj/marked
- https://lists.fedoraproject.org/archives/list/[email protected]/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS
- https://lists.fedoraproject.org/archives/list/[email protected]/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S