{"action":"Upgrade marked to 0.3.17 or later.","affected":[{"fixed":"0.3.17","introduced":"0"}],"component":"marked","cve_ids":["CVE-2018-25110"],"ecosystem":"npm","epss":0.0061,"exploited":false,"fixed_versions":["0.3.17"],"ghsa_id":"GHSA-p9wx-2529-fp83","id":"tcs_01M5KG385XQ7GGF929N2V01V64","modified_at":"2025-05-27T15:27:40.131270Z","published_at":"2025-05-23T15:31:16Z","references":["https://osv.dev/vulnerability/GHSA-p9wx-2529-fp83","https://nvd.nist.gov/vuln/detail/CVE-2018-25110","https://github.com/markedjs/marked/issues/1070","https://github.com/markedjs/marked/pull/1083","https://github.com/markedjs/marked/commit/20bfc106013ed45713a21672ad4a34df94dcd485","https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2018/CVE-2018-25110","https://github.com/markedjs/marked"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-p9wx-2529-fp83","url":"https://osv.dev/vulnerability/GHSA-p9wx-2529-fp83"}],"summary":"Marked allows Regular Expression Denial of Service (ReDoS) attacks"}