Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to vulnerability in Marked

Summary Automation Assets in IBM Cloud Pak for Integration is vulnerable to vulnerability in Marked. CVE-2026-41680 The vulnerability have been addressed. Vulnerability Details CVEID:CVE-2026-41680 DESCRIPTION: Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of...

@brrinta/uikit (>=0.1.1, <=0.1.8), @dan8oren/mcp-apple-notes (>=1.0.0, <=1.0.2) +12 more potentially affected by CVE-2026-41680 via marked (>=18.0.0, <=18.0.1)

marked NPM version =18.0.0, =0.1.1, =1.0.0, =1.44.0, =2.27.1, =0.2.14, =0.0.4, =2.13.0, =3.0.0-beta.2, =1.0.0-alpha.1, =1.0.0-alpha.4, =2.5.0, =2.6.0 Source cves: CVE-2026-41680 Source advisory: OSV:GHSA-6V9C-7CG6-27Q7...

@brrinta/uikit (>=0.1.1, <=0.1.8), @dan8oren/mcp-apple-notes (>=1.0.0, <=1.0.2) +12 more potentially affected by CVE-2026-41680 via marked (>=18.0.0, <=18.0.1)

marked NPM version =18.0.0, =0.1.1, =1.0.0, =1.44.0, =2.27.1, =0.2.14, =0.0.4, =2.13.0, =3.0.0-beta.2, =1.0.0-alpha.1, =1.0.0-alpha.4, =2.5.0, =2.6.0 Source cves: CVE-2026-41680 Source advisory: SNYK:JS-MARKED-16298060...

CVE-2026-41680

creationtimestamp| type| source ---|---|--- 2026-04-23 01:54:48+00:00| published-proof-of-concept| https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7 2026-04-24 19:23:03+00:00| published-proof-of-concept| Telegram/KzwiN8QhKmj3TuqYtGeX9siiyoqjfAY8f7zipbEz0Wiqhk 2026-04-30...