Tag

marked-js

Safeguard articles tagged "marked-js" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2022-21680: ReDoS in marked via block token regexes

CVE-2022-21680: how a ReDoS in marked's block-tokenizer regexes could let attackers freeze Markdown-rendering services, plus affected versions, fix, and mitigation steps.

Oct 13, 20257 min read