CVE-2021-21306
1 advisory.
npm/marked CVE-2021-21306: medium 5.3, EPSS 2.46%
Regular Expression Denial of Service (REDoS) in Marked
Action: Upgrade marked to 2.0.0 or later.
npm i marked@2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.1 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-4r62-v4vq-hr96
- https://github.com/markedjs/marked/security/advisories/GHSA-4r62-v4vq-hr96
- https://nvd.nist.gov/vuln/detail/CVE-2021-21306
- https://github.com/markedjs/marked/issues/1927
- https://github.com/markedjs/marked/pull/1864
- https://github.com/markedjs/marked/commit/7293251c438e3ee968970f7609f1a27f9007bccd
- https://www.npmjs.com/package/marked
CVE-2021-21306 · published · modified · JSON