CVE-2026-41680
1 advisory.
npm/marked CVE-2026-41680: high 7.5, EPSS 0.51%
Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer
Action: Upgrade marked to 18.0.2 or later.
npm i marked@18.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 18.0.0 | 18.0.2 | - |
Fixed versions
| 18.0.2 |
Sources
- osv: GHSA-6v9c-7cg6-27q7
- https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7
- https://nvd.nist.gov/vuln/detail/CVE-2026-41680
- https://github.com/markedjs/marked
CVE-2026-41680 · published · modified · JSON