marked

Security advisories

Grouped by the version that fixes them, so one upgrade reads as one step.

• Fixed in 18.0.2 · 1 advisory

  • HIGHMarked Vulnerable to OOM Denial of Service via Infinite Recursion in marked TokenizerGHSA-6v9c-7cg6-27q7

• Fixed in 4.0.10 · 2 advisories

  • HIGHInefficient Regular Expression Complexity in markedGHSA-5v2h-r2cx-5xgj
  • HIGHInefficient Regular Expression Complexity in markedGHSA-rrrm-qjm4-v8hf

• Fixed in 2.0.0 · 1 advisory

  • MODERATERegular Expression Denial of Service (REDoS) in MarkedGHSA-4r62-v4vq-hr96

• Fixed in 0.7.0 · 1 advisory

  • LOWRegular Expression Denial of Service in markedGHSA-ch52-vgq2-943f

Every stable release, newest first. Notes are quoted as the maintainers published them.

1. 18.1.1

   12 October 2026
   cli: honor an explicitly empty string input

   Bug Fixes

   • cli: honor an explicitly empty string input

   • end blockquote before a lazy line after a heading, hr or html block

   • keep a backslash in a code span from hiding emphasis

   • keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112

   • let indented and type 3-5 html blocks interrupt a paragraph

   • make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120

   • match pre, script, style and textarea as whole tag names

   • preserve enclosing link state after parsing images

   • respect tab stops in list continuation indentation

   Performance Improvements

   • avoid repeated raw string copies in nested lists

2. 18.1.0

   5 October 2026
   Avoid cubic backtracking on unicode whitespace in a link destination

   Bug Fixes

   • avoid cubic backtracking on unicode whitespace in a link destination

   • load CLI configs with top-level await

   • reject unbalanced parentheses in link destinations

   Features

   • add linkParenPossible to lexer state to fail fast for link token generation

3. 18.0.14

   22 September 2026
   Allow indented lines in setext heading text

   Bug Fixes

   • allow indented lines in setext heading text

   • decode numeric character references in text

   • keep text after empty nested blockquote (#4101) (1b89557), closes #4098

   • preserve internal tabs in list item content

   • strip whitespace when normalizing link reference labels

   • support GFM protocol autolinks

4. 18.0.13

   12 September 2026
   Allow tabs in the thematic break that ends a list item

   Bug Fixes

   • allow tabs in the thematic break that ends a list item

   • avoid O(n^2) scanning in reflinkSearch

   • case fold reference link labels

   • drop the leading whitespace after a hard line break

   • match html block start conditions when ending a list item

   • respect raw tokens when closing link labels

   • strip a tab that follows spaces in an indented code block

5. 18.0.12

   7 September 2026
   Allow a tab before the closing sequence of an ATX heading

   Bug Fixes

   • allow a tab before the closing sequence of an ATX heading

   • allow one more level of nested brackets in a link label

   • do not add a newline to an empty code block

   • escape character references in autolink destinations

   • reject GFM email autolink when the domain ends in _ or

   • reject invalid characters in HTML tag names

   • remove up to the fence indentation from each content line

6. 18.0.11

   24 August 2026
   Do not nest a link inside a link

   Bug Fixes

   • do not nest a link inside a link

   • inlineTokens rebuilds the reflink-mask preamble per call

   • keep emphasis in the text of a rejected reference link

7. 18.0.10

   18 August 2026
   Keep the em/strong mask the same length as the source

   Bug Fixes

   • keep the em/strong mask the same length as the source

   • parse EOF backtick fences after paragraphs

   • place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

8. 18.0.9

   4 August 2026
   An unmatched strong run before emphasis stays literal

   Bug Fixes

   • an unmatched strong run before emphasis stays literal

   • Fix spurious deeper nesting in a blockquote continuation

   • pedantic foo: and "word" emphasis parsing

9. 18.0.8

   4 August 2026
   Fall back to default checkbox renderer when extension returns false

   Bug Fixes

   • fall back to default checkbox renderer when extension returns false

10. 18.0.7

    21 July 2026
    Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991

    Bug Fixes

    • Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991

    • Avoid O(n^2) masked source rebuild in inline tokenizer

    • keep empty list after blockquote as a sibling block

    • preserve code spans adjacent to tildes

    • Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1

    • treat a line of only tabs as a blank line between paragraphs

Major versions

• 18.xsince 7 April 2026 · latest 18.1.1 · 17 releases
• 17.xsince 7 November 2025 · latest 17.0.6 · 7 releases
• 16.xsince 27 June 2025 · latest 16.4.2 · 10 releases
• 15.xsince 9 November 2024 · latest 15.0.12 · 13 releases
• 14.xsince 7 August 2024 · latest 14.1.4 · 6 releases
• 13.xsince 12 June 2024 · latest 13.0.3 · 4 releases
• 12.xsince 3 February 2024 · latest 12.0.2 · 3 releases
• 11.xsince 29 November 2023 · latest 11.2.0 · 5 releases
• 10.xsince 11 November 2023 · latest 10.0.0 · 1 release
• 9.xsince 9 September 2023 · latest 9.1.6 · 11 releases
• 8.xsince 3 September 2023 · latest 8.0.1 · 2 releases
• 7.xsince 6 August 2023 · latest 7.0.5 · 6 releases
• 6.xsince 31 July 2023 · latest 6.0.0 · 1 release
• 5.xsince 2 May 2023 · latest 5.1.2 · 9 releases
• 4.xsince 2 November 2021 · latest 4.3.0 · 36 releases
• 3.xsince 16 August 2021 · latest 3.0.8 · 9 releases
• 2.xsince 7 February 2021 · latest 2.1.3 · 12 releases
• 1.xsince 21 April 2020 · latest 1.2.9 · 14 releases
• 0.xsince 24 July 2011 · latest 0.8.2 · 59 releases