Description
Affected versions of `marked` are vulnerable to Regular Expression Denial of Service (ReDoS). The `_label` subrule may significantly degrade parsing performance of malformed input.
## Recommendation
Upgrade to version 0.7.0 or later.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | marked | >= 0.4.0, < 0.7.0 | 0.7.0 | GHSA-ch52-vgq2-943f |