CVE-2021-21306

Published: 2021-02-08T22:15Z

Last Modified: 2024-11-21T05:47Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there is a Regular expression Denial of Service vulnerability. This vulnerability can affect anyone who runs user generated code through marked. This vulnerability is fixed in version 2.0.0. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt