Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Regular Expression Denial of Service (ReDoS) in markedjs/marked
Vulnerability Description
Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expressions used for parsing HTML tags and markdown links. An attacker can exploit this vulnerability by providing specially crafted markdown input, such as deeply nested or repetitively structured brackets or tag attributes, which cause the parser to hang and lead to a Denial of Service.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
marked 安全漏洞
Vulnerability Description
marked是美国Christopher Jeffrey个人开发者的一款使用JavaScript编写的Markdown解析器和编译器。 marked 0.3.17之前版本存在安全漏洞，该漏洞源于解析HTML标签和markdown链接的正则表达式存在灾难性回溯，可能导致正则表达式拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A