CVE-2017-16114

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

Score

CVSS 3.0 7.5 High

Status

Modified - support@hackerone.com

Published

2018-06-07

Last modified

2024-09-17

Weaknesses

CWE-400

Affected products

• Marked Node Module (Hackerone)
• Marked (Marked Project)

References

• https://github.com/chjj/marked/issues/937
• https://nodesecurity.io/advisories/531