Marked node module

This hub aggregates every CVE we track for Marked node module, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 2 most recently published vulnerabilities affecting Marked node module.

• CVE-2017-16114The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.7.5Jun 7, 2018
• CVE-2016-10531marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content...6.1May 31, 2018