Approved changes feed: RSS · Atom
cpe:2.3:a:marked_project:marked:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Marked Project (c63b5ecd-5f32-5b8e-afee-53cd04468bd2) |
|---|---|
| Product | Marked (b07b0a05-8862-550b-8656-76e80d1d6280) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/node-marked |
purl2cpe | 2026-06-01 10:16:01.370514 |
pkg:deb/ubuntu/node-marked |
purl2cpe | 2026-06-01 10:16:01.370517 |
pkg:github/markedjs/marked |
purl2cpe | 2026-06-01 10:16:01.370520 |
pkg:maven/org.webjars.npm/marked |
purl2cpe | 2026-06-01 10:16:01.370523 |
pkg:npm/marked |
purl2cpe | 2026-06-01 10:16:01.370525 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-16114 |
vulnerable | 2026-06-08 05:09:00.047312 |
Details available
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
Published: 2018-06-07T02:00:00.000Z
Updated: 2024-09-17T03:44:01.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000427 |
vulnerable | 2026-06-08 05:08:34.538249 |
Details available
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.
Published: 2018-01-02T23:00:00.000Z
Updated: 2024-08-05T22:00:41.033Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1370 |
vulnerable | 2026-06-08 05:06:25.486410 |
Details available
Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link.
Published: 2015-01-27T17:00:00.000Z
Updated: 2024-08-06T04:40:18.574Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.