Makenowjust

**Name of the Vulnerable Software and Affected Versions** Marked versions prior to 4.0.10 **Description** The issue is related to a denial of service caused by the regular expression `inline.reflinkSearch` potentially leading to catastrophic backtracking against some strings. This can affect anyone who runs untrusted markdown through a vulnerable version of Marked and does not use a worker with a time limit. **Recommendations** For versions prior to 4.0.10, upgrade to version 4.0.10 to resolve the issue. As a temporary workaround, avoid running untrusted markdown through Marked or run Marked on a worker thread and set a reasonable time limit to prevent draining resources.

**Name of the Vulnerable Software and Affected Versions** Marked versions prior to 4.0.10 **Description** The issue is related to the regular expression `block.def` which may cause catastrophic backtracking against some strings, leading to a regular expression denial of service (ReDoS). This can affect anyone who runs untrusted markdown through a vulnerable version of marked and does not use a worker with a time limit. **Recommendations** For versions prior to 4.0.10, upgrade to version 4.0.10 to resolve the issue. As a temporary workaround, avoid running untrusted markdown through marked or run marked on a worker thread and set a reasonable time limit to prevent draining resources.

**Name of the Vulnerable Software and Affected Versions** markdown-it versions prior to 12.3.2 **Description** The issue concerns a Markdown parser that can be significantly slowed down by special patterns with lengths greater than 50 thousand characters. There are no known real-world incidents or estimated numbers of affected devices provided. **Recommendations** For versions prior to 12.3.2, upgrade to version 12.3.2 or later to receive a patch. As there are no known workarounds aside from upgrading, it is essential to apply this update to mitigate the issue.