https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 17:30:21 +0000 https://vulnerability.circl.lu/vuln/cve-2015-8854 <p>The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a &#34;catastrophic backtracking issue for the em inline rule,&#34; aka a &#34;regular expression denial of service (ReDoS).&#34;</p> <p>The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a &#34;catastrophic backtracking issue for the em inline rule,&#34; aka a &#34;regular expression denial of service (ReDoS).&#34;</p> https://vulnerability.circl.lu/vuln/cve-2015-8854 https://vulnerability.circl.lu/vuln/ghsa-hjcp-j389-59ff <p><strong>Affected:</strong> npm: marked</p> <p>Versions 0.3.3 and earlier of `marked` are affected by a regular expression denial of service ( ReDoS ) vulnerability when passed inputs that reach the `em` inline rule.</p> <p>## Recommendation</p> <p>Update to version 0.3.4 or later.</p> <p><strong>Affected:</strong> npm: marked</p> <p>Versions 0.3.3 and earlier of `marked` are affected by a regular expression denial of service ( ReDoS ) vulnerability when passed inputs that reach the `em` inline rule.</p> <p>## Recommendation</p> <p>Update to version 0.3.4 or later.</p> https://vulnerability.circl.lu/vuln/ghsa-hjcp-j389-59ff