{"action":"Upgrade marked to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0.3.14"}],"component":"marked","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-xf5p-87ch-gxw2","id":"tcs_01M5KGHR55T1R2B00RD01Z33CB","modified_at":"2022-08-02T17:43:57Z","published_at":"2019-06-05T14:10:03Z","references":["https://osv.dev/vulnerability/GHSA-xf5p-87ch-gxw2","https://github.com/markedjs/marked/pull/1460","https://github.com/markedjs/marked/commit/b15e42b67cec9ded8505e9d68bb8741ad7a9590d","https://github.com/markedjs/marked","https://github.com/markedjs/marked/releases/tag/v0.6.2","https://snyk.io/vuln/SNYK-JS-MARKED-174116","https://www.npmjs.com/advisories/812"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xf5p-87ch-gxw2","url":"https://osv.dev/vulnerability/GHSA-xf5p-87ch-gxw2"}],"summary":"Marked ReDoS due to email addresses being evaluated in quadratic time"}