CVE-2018-25110

CVE-2018-25110 describes a Regular Expression Denial of Service (ReDoS) vulnerability in the 'marked' markdown parser, affecting versions prior to 0.3.17. This flaw allows an attacker to provide specially crafted markdown input, such as deeply nested brackets or tag attributes, which causes the parser to enter a state of catastrophic backtracking and become unresponsive. With a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector, low attack complexity, and can lead to a complete denial of service for affected systems. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.