https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T09:32:08.861685+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-16114 CVE-2017-16114 2026-09-29T09:32:08.864658+00:00

Affected: HackerOne marked node module

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

 https://vulnerability.circl.lu/vuln/ghsa-x5pg-88wf-qq4p GHSA-x5pg-88wf-qq4p — Regular Expression Denial of Service in marked 2026-09-29T09:32:08.864792+00:00

Affected: npm: marked

Affected versions of `marked` are vulnerable to a regular expression denial of service.

The amplification in this vulnerability is significant, with 1,000 characters resulting in the event loop being blocked for around 6 seconds.

## Recommendation

Update to version 0.3.9 or later.