Search for packages
| purl | pkg:nuget/marked@0.3.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2015-1370
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Incomplete block list vulnerability in marked for Node.js allows remote … |
Vulnerable |
|
CVE-2017-16114
|
Uncontrolled Resource Consumption The marked module is vulnerable to a regular expression denial of service. Based on the information published … | There are no reported fixed by versions. |
|
CVE-2017-1000427
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') marked is vulnerable to an XSS attack in the data: … | There are no reported fixed by versions. |
|
CVE-2016-10531
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') marked is an application that is meant to parse and … | There are no reported fixed by versions. |
|
CVE-2022-21680
Aliases: GHSA-rrrm-qjm4-v8hf |
Inefficient Regular Expression Complexity The regular expression `block.def` may cause catastrophic backtracking against some strings and lead to a regular … | There are no reported fixed by versions. |
|
CVE-2022-21681
Aliases: GHSA-5v2h-r2cx-5xgj |
Inefficient Regular Expression Complexity The regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2014-3743
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the Marked module for … |