GHSA-ch52-vgq2-943f: 
JavaScript vulnerability analysis and mitigation

A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the marked npm package, tracked as GHSA-ch52-vgq2-943f. The vulnerability was discovered and published to the GitHub Advisory Database on September 3, 2020, with the latest update on April 11, 2023. The vulnerability affects marked versions from 0.4.0 to versions prior to 0.7.0 (GitHub Advisory).

The vulnerability stems from the _label subrule implementation in the marked package, which can significantly degrade parsing performance when processing malformed input. This issue has been classified with a Low severity rating and is categorized under CWE-1333 (GitHub Advisory).

When exploited, this vulnerability can lead to Regular Expression Denial of Service (ReDoS), potentially causing performance degradation in applications using the affected versions of the marked package (GitHub Advisory).

The vulnerability can be triggered through malformed input targeting the _label subrule in the marked package. The issue affects versions 0.4.0 and later, up to but not including version 0.7.0 (GitHub Advisory).

Users are recommended to upgrade to marked version 0.7.0 or later, which contains the fix for this vulnerability (GitHub Advisory).