Sign upLogin

propero-oss/easy-store-react

View on GitHub
Star

Showing 1 of 1 total issue

marked Regular Expression Denial of Service
Open

    "marked": {
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/marked/-/marked-2.0.0.tgz",
      "integrity": "sha512-NqRSh2+LlN2NInpqTQnS614Y/3NkVMFFU6sJlRFEpxJ/LHuK/qJECH7/fXZjk4VZstPW/Pevjil/VtSONsLc7Q==",
      "dev": true
Severity: Minor
Found in package-lock.json by nodesecurity

Regular Expression Denial of Service

Overview:

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

Recommendation:

Consider another markdown parser until the issue can be addressed.

Severity
Category
Status
Source
Language