pkg:npm/marked

All known vulnerabilities

• HIGH7.5CVE-2026-41680Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer
  >= 18.0.0, < 18.0.2
• HIGH7.5CVE-2018-25110Marked allows Regular Expression Denial of Service (ReDoS) attacks
  from 0, < 0.3.17
• HIGH7.5CVE-2022-21681Inefficient Regular Expression Complexity in marked
  from 0, < 4.0.10
• HIGH7.5Inefficient Regular Expression Complexity in marked
  from 0, < 4.0.10
• HIGH7.5Regular Expression Denial of Service in marked
  from 0, < 0.3.9
• HIGH7.5Regular Expression Denial of Service in marked
  from 0, < 0.3.4
• MEDIUM6.1Multiple Content Injection Vulnerabilities in marked
  from 0, < 0.3.1
• MEDIUM6.1Sanitization bypass using HTML Entities in marked
  from 0, < 0.3.6
• MEDIUM6.1Marked vulnerable to XSS from data URIs
  from 0, < 0.3.7
• MEDIUM5.3Regular Expression Denial of Service (REDoS) in Marked
  >= 1.1.1, < 2.0.0
• —VBScript Content Injection in marked
  from 0, < 0.3.3