Vulnerabilities > Marked Project > Marked > 0.3.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-14 | CVE-2022-21680 | Marked is a markdown parser and compiler. | 7.5 |
| 2022-01-14 | CVE-2022-21681 | Marked is a markdown parser and compiler. | 7.5 |
| 2018-06-07 | CVE-2017-16114 | Resource Exhaustion vulnerability in Marked Project Marked The marked module is vulnerable to a regular expression denial of service. | 7.5 |
| 2018-05-31 | CVE-2016-10531 | Cross-site Scripting vulnerability in Marked Project Marked marked is an application that is meant to parse and compile markdown. | 6.1 |
| 2018-01-02 | CVE-2017-1000427 | Cross-site Scripting vulnerability in Marked Project Marked marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser. | 6.1 |
| 2017-01-23 | CVE-2015-8854 | The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service (ReDoS)." | 7.5 |