GHSA-ch52-vgq2-943f
Regular Expression Denial of Service in marked
Affected versions of marked are vulnerable to Regular Expression Denial of Service (ReDoS). The _label subrule may significantly degrade parsing performance of malformed input.
Recommendation
Upgrade to version 0.7.0 or later.
What each source reports
GitHub AdvisoriesNo score
Regular Expression Denial of Service in marked
Affected versions of marked are vulnerable to Regular Expression Denial of Service (ReDoS). The _label subrule may significantly degrade parsing performance of malformed input.
Recommendation
Upgrade to version 0.7.0 or later.
- Record
GHSA-ch52-vgq2-943f- Weakness
- CWE-1333
- Updated
- 2026-11-02
OSVNo score
Regular Expression Denial of Service in marked
Affected versions of marked are vulnerable to Regular Expression Denial of Service (ReDoS). The _label subrule may significantly degrade parsing performance of malformed input.
Recommendation
Upgrade to version 0.7.0 or later.
- Record
GHSA-ch52-vgq2-943f- Weakness
- CWE-1333
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
markednpm | 0.4.0 up to 0.7.0 | 0.7.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-ch52-vgq2-943f is a vulnerability with no CVSS score yet in marked, published September 3, 2020. No source lists public exploit code. Fixed in marked 0.7.0.