Regular Expression Denial of Service in marked (GHSA-hjcp-j389-59ff)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2015-8854
Severity: HIGH · CWE: CWE-1333

Versions 0.3.3 and earlier of `marked` are affected by a regular expression denial of service ( ReDoS ) vulnerability when passed inputs that reach the `em` inline rule.



## Recommendation

Update to version 0.3.4 or later.

Affected packages:
package: ecosystem: npm
name: marked
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.4