Lucene search
K

5 matches found

OSV
OSV
added 2021/02/25 2:1 a.m.0 views

GHSA-7M7Q-Q53V-J47V Regular Expression Denial of Service

A flaw was found in nodejs-marked versions from 0.5.0 to before 0.6.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. Input to the host variable is vulnerable when input contains parenthesis in link URIs, coupled with a high number of link tokens i...

5.8AI score
Exploits0References2
Github Security Blog
Github Security Blog
added 2021/02/25 2:1 a.m.13 views

Regular Expression Denial of Service

A flaw was found in nodejs-marked versions from 0.5.0 to before 0.6.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. Input to the host variable is vulnerable when input contains parenthesis in link URIs, coupled with a high number of link tokens i...

4.2AI score
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/06/04 12:0 a.m.33 views

Fedora 32 : marked (2020-d714c08261)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-d714c08261 advisory. New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs- marked. I tested upgrades from both, but m...

7.8CVSS7AI score0.01098EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2020/06/01 12:0 a.m.35 views

Fedora 31 : marked (2020-5eca570e16)

The remote Fedora 31 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-5eca570e16 advisory. New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs- marked. I tested upgrades from both, but m...

7.8CVSS7AI score0.01098EPSS
Exploits1References3
CNVD
CNVD
added 2016/04/24 12:0 a.m.1 views

Joyent Node.js marked denial of service vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. marked is a Markdown parser and compiler. A denial of service vulnerability exists in Joyent Node.js marked, which allows remote attackers to conduct denial of service attacks by submitting a specially...

7.8CVSS6.9AI score0.01098EPSS
Exploits0References1
Rows per page
Query Builder