Lucene search
GoogleOSV:GHSA-X5PG-88WF-QQ4PHistoryJul 24, 2018 - 8:10 p.m.
Regular Expression Denial of Service in marked
2018-07-2420:10:52
Google
osv.dev
10
EPSS
0.001
Percentile
45.6%
Affected versions of marked are vulnerable to a regular expression denial of service.
The amplification in this vulnerability is significant, with 1,000 characters resulting in the event loop being blocked for around 6 seconds.
Recommendation
Update to version 0.3.9 or later.
Related
cve
cve
CVE-2017-16114
2018-06-07 02:29:02
cvelist
cvelist
CVE-2017-16114
2018-06-07 02:00:00
redhatcve
redhatcve
CVE-2017-16114
2022-05-20 22:45:20
github
github
Regular Expression Denial of Service in marked
2018-07-24 20:10:52
nvd
nvd
CVE-2017-16114
2018-06-07 02:29:02
osv
osv
CVE-2017-16114
2018-06-07 02:29:02
ubuntucve
ubuntucve
CVE-2017-16114
2018-06-07 00:00:00
nodejs
nodejs
Regular Expression Denial of Service
2017-09-21 04:12:52
prion
prion
Denial of service
2018-06-07 02:29:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2017-09-22 16:21:03
debiancve
debiancve
CVE-2017-16114
2018-06-07 02:29:02
