{"action":"Upgrade marked to 0.3.4 or later.","affected":[{"fixed":"0.3.4","introduced":"0"}],"component":"marked","cve_ids":["CVE-2015-8854"],"ecosystem":"npm","epss":0.04417,"exploited":false,"fixed_versions":["0.3.4"],"ghsa_id":"GHSA-hjcp-j389-59ff","id":"tcs_01M5KFVC1YY7SG30Y0AVWZ3TBH","modified_at":"2024-02-09T17:50:43Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-hjcp-j389-59ff","https://nvd.nist.gov/vuln/detail/CVE-2015-8854","https://github.com/chjj/marked/issues/497","https://github.com/advisories/GHSA-hjcp-j389-59ff","https://github.com/chjj/marked","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S","https://support.f5.com/csp/article/K05052081?utm_source=f5support&utm_medium=RSS","https://www.npmjs.com/advisories/23","https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS","http://www.openwall.com/lists/oss-security/2016/04/20/11"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hjcp-j389-59ff","url":"https://osv.dev/vulnerability/GHSA-hjcp-j389-59ff"}],"summary":"Regular Expression Denial of Service in marked"}