CVE-2017-16114

Name of the Vulnerable Software and Affected Versions marked versions prior to 0.3.9

Description The issue is related to incorrect handling of regular expressions in the marked module, which can lead to a denial of service. This can cause the event loop to be blocked, with significant amplification - 1,000 characters can result in a blockage of around 6 seconds.

Recommendations Update to version 0.3.9 or later. As a temporary workaround, consider restricting the input size to prevent excessive blocking of the event loop until a patch is available.