Описание
Regular Expression Denial of Service in marked
Affected versions of marked are vulnerable to a regular expression denial of service.
The amplification in this vulnerability is significant, with 1,000 characters resulting in the event loop being blocked for around 6 seconds.
Recommendation
Update to version 0.3.9 or later.
Пакеты
marked
< 0.3.9
0.3.9
Связанные уязвимости
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
The marked module is vulnerable to a regular expression denial of serv ...
Уязвимость компилятора для разбора Markdown Marked, связанная с некорректной обработкой регулярных выражений, позволяющая нарушителю вызвать отказ в обслуживании