Skip to content
This repository has been archived by the owner on Sep 2, 2022. It is now read-only.

Fixed Regular Expression DoS in marked #4691

Closed
wants to merge 6 commits into from
Closed

Fixed Regular Expression DoS in marked #4691

wants to merge 6 commits into from

Conversation

gustawdaniel
Copy link

@gustawdaniel gustawdaniel commented Jun 22, 2019

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.6.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ prisma                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ prisma > prisma-cli-engine > marked                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/812                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

markedjs/marked#1460

lpedromachado and others added 2 commits May 30, 2019 12:35
┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.6.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ prisma                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ prisma > prisma-cli-engine > marked                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/812                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

> markedjs/marked#1460
@CLAassistant
Copy link

CLAassistant commented Jun 22, 2019

CLA assistant check
Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ gustawdaniel
❌ lpedromachado
You have signed the CLA already but the status is still pending? Let us recheck it.

@gustawdaniel
Copy link
Author

@lpedromachado you need to sign license agreement if we want to merge this pull request.

@gustawdaniel
Copy link
Author

Because of maintenance mode I would like to please anyone for making decision if we can merge it or close this pull request.

https://github.com/prisma/prisma/issues/4898

@janpio janpio closed this Sep 1, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants