CVE-2022-21681
1 advisory.
npm/marked CVE-2022-21681: high 7.5, EPSS 2.77%
Inefficient Regular Expression Complexity in marked
Action: Upgrade marked to 4.0.10 or later.
npm i marked@4.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.10 | - |
Fixed versions
| 4.0.10 |
Sources
- osv: GHSA-5v2h-r2cx-5xgj
- https://github.com/markedjs/marked/security/advisories/GHSA-5v2h-r2cx-5xgj
- https://nvd.nist.gov/vuln/detail/CVE-2022-21681
- https://github.com/markedjs/marked/commit/8f806573a3f6c6b7a39b8cdb66ab5ebb8d55a5f5
- https://github.com/markedjs/marked/commit/c4a3ccd344b6929afa8a1d50ac54a721e57012c0
- https://github.com/markedjs/marked
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AIXDMC3CSHYW3YWVSQOXAWLUYQHAO5UX
CVE-2022-21681 · published · modified · JSON