Описание
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-marked | fixed | 0.3.9+dfsg-1 | package |
Примечания
https://nodesecurity.io/advisories/531
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 7 лет назад
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
CVSS3: 7.5
nvd
больше 7 лет назад
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
CVSS3: 7.5
fstec
больше 8 лет назад
Уязвимость компилятора для разбора Markdown Marked, связанная с некорректной обработкой регулярных выражений, позволяющая нарушителю вызвать отказ в обслуживании