Skip to content
OpenAdvisories

Package · Ubuntu

node-marked

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2018-25110

    Regular Expression Denial of Service (ReDoS) in markedjs/marked

    Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expressions used for parsing HTML tags and markdown links. An attacker can exploit this vulnerability by …

    marked node-marked node-marked Debian Ubuntu npm
  • Medium 6.1
    CVE-2016-10531

    Sanitization bypass using HTML Entities in marked

    marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content injection protection (`sanitize: true`) to inject a `javascri…

    HackerOne marked node module marked node-marked Debian Ubuntu npm
  • Medium 6.1
    CVE-2017-1000427

    Marked vulnerable to XSS from data URIs

    marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.

    marked node-marked node-marked Debian Ubuntu npm
  • Medium —
    CVE-2015-1370

    VBScript Content Injection in marked

    Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link.

    marked node-marked node-marked Debian Ubuntu npm