-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| marked | npm | < 0.3.9 | 0.3.9 |
Miggo AIRoot Cause AnalysisThe vulnerability was originally reported as a ReDoS in marked.js' input processing. While no patch details are available, ReDoS vulnerabilities in Markdown parsers typically exist in regex-heavy inline content handlers. The Lexer.tokenize method initiates parsing, and InlineLexer.output processes inline elements - both would appear in stack traces during input processing. Confidence is medium due to lack of direct patch evidence, but aligns with the described attack vector and typical vulnerable components in Markdown parsers.
JavaScriptJavaScriptOngoing coverage of React2Shell