Marked Node Module (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-07. Vendor: Hackerone.

CVEs of Marked Node Module

• CVE-2017-16114 - CVSS 7.5 (high), 2018-06-07: The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for…
• CVE-2016-10531 - CVSS 6.1 (medium), 2018-05-31: marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities,…