Markedjs vulnerabilities
We track 3 vulnerabilities in Markedjs products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 24, 2026.
Latest Markedjs vulnerabilities
- 7.5 High severity
marked: Uncontrolled Resource Consumption
Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By providing a specific 3-byte input sequence a tab, a vertical tab, and a newline (\x09\x0b\n)—an unauthenticated attacker can
- 7.5 High severity
marked: Inefficient Regular Expression Complexity
Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial of service (DoS). Anyone who runs untrusted markdown through a vulner
- 7.5 High severity
marked: Inefficient Regular Expression Complexity
Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking against some strings and lead to a regular expression denial of service (ReDoS). Anyone who runs untrusted markdown throug