MEDIUM5.3npm
GHSA-4r62-v4vq-hr96· CVE-2021-21306Regular Expression Denial of Service (REDoS) in Marked
Modified: 9/10/2026
package
npm/marked
pkg:npm/marked
HIGH7.5npm
GHSA-5v2h-r2cx-5xgj· CVE-2022-21681Inefficient Regular Expression Complexity in marked
Modified: 9/10/2026
HIGH7.5npm
GHSA-6v9c-7cg6-27q7· CVE-2026-41680Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer
Modified: 5/5/2026
MEDIUM6.1npm
GHSA-7px7-7xjx-hxm8· CVE-2017-1000427Marked vulnerable to XSS from data URIs
Modified: 11/8/2023
MEDIUM6.1npm
GHSA-9cw2-jqp5-7x39· CVE-2014-3743Multiple Content Injection Vulnerabilities in marked
Modified: 11/8/2023
MEDIUMnpm
GHSA-cfjh-p3g4-3q2f· CVE-2015-1370VBScript Content Injection in marked
Modified: 11/8/2023
LOWnpm
GHSA-ch52-vgq2-943fRegular Expression Denial of Service in marked
Modified: 8/31/2020
HIGH7.5npm
GHSA-hjcp-j389-59ff· CVE-2015-8854Regular Expression Denial of Service in marked
Modified: 2/9/2024
MEDIUMnpm
GHSA-p9wx-2529-fp83· CVE-2018-25110Marked allows Regular Expression Denial of Service (ReDoS) attacks
Modified: 5/27/2025
HIGH7.5npm
GHSA-rrrm-qjm4-v8hf· CVE-2022-21680Inefficient Regular Expression Complexity in marked
Modified: 9/10/2026
MEDIUM6.1npm
GHSA-vfvf-mqq8-rwqc· CVE-2016-10531Sanitization bypass using HTML Entities in marked
Modified: 11/8/2023
HIGH7.5npm
GHSA-x5pg-88wf-qq4p· CVE-2017-16114Regular Expression Denial of Service in marked
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-xf5p-87ch-gxw2Marked ReDoS due to email addresses being evaluated in quadratic time
Modified: 8/2/2022