Software
marked
Aggregate across all detected versions
Total Hosts
0
distinct hosts
Versions Seen
0
Countries
0
Known CVEs
11
known CVEs
Top Countries
No geolocated hosts.
Top ASNs
No attributed hosts.
CVE Matches
| CVE | CVSS | Severity | Summary |
|---|---|---|---|
| CVE-2015-8854 | 7.5 | N/A | The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophic... |
| CVE-2017-16114 | 7.5 | N/A | The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for a... |
| CVE-2018-25110 | 7.5 | N/A | Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expres... |
| CVE-2022-21680 | 7.5 | N/A | Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking against some strings a... |
| CVE-2022-21681 | 7.5 | N/A | Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against som... |
| CVE-2026-41680 | 7.5 | N/A | Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By providing a specific 3-by... |
| CVE-2014-3743 | 6.1 | N/A | Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML... |
| CVE-2016-10531 | 6.1 | N/A | marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it'... |
| CVE-2017-1000427 | 6.1 | N/A | marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser. |
| CVE-2021-21306 | 5.3 | N/A | Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there is a Regular expressi... |
| CVE-2015-1370 | 4.3 | MEDIUM | Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript... |