Linux Distros Unpatched Vulnerability : CVE-2017-16114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for...

CVE-2017-16114

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds...

@absinthe/graphiql-workspace (>=1.1.4, <=1.1.5), @agilys/custom-graphiql (>=2.0.0-beta1, <=2.0.3) +1307 more potentially affected by CVE-2017-16114 via marked (>=0.0.1, <=0.3.7)

marked NPM version =0.0.1, =1.1.4, =2.0.0-beta1, =1.0.1, =0.25.0, =0.0.0-development, =3.3.1, =0.0.1, =0.0.0, =0.0.3 and more Source cves: CVE-2017-16114 Source advisory: OSV:GHSA-X5PG-88WF-QQ4P...

CVE-2017-16114

CVE-2017-16114 affects the marked Markdown parser module. Vulnerable behavior is a regular expression denial of service when processing untrusted input; measurements report about 1,000 characters blocking the event loop for around 6 seconds. Affected environments are those that install the marked...