description: The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.
problem types: Denial of Service (CWE-400)
affected:
{
product: marked node module
vendor: HackerOne
versions:
status: affected, version: All versions
}