[Snyk] Upgrade marked from 4.0.12 to 4.0.18

[MarcelRaschke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade marked from 4.0.12 to 4.0.18.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-07-11.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Directory Traversal SNYK-JS-MOMENT-2440688	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-2404333	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NANOID-2332193	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: marked

• 4.0.18 - 2022-07-11
  

  4.0.18 (2022-07-11)

  Bug Fixes

  • fix heading in list item (#2520) (01c98d1)
• 4.0.17 - 2022-06-13
  

  4.0.17 (2022-06-13)

  Bug Fixes

  • Code and heading after list without blank line (#2483) (15f3f15)
• 4.0.16 - 2022-05-17
  

  4.0.16 (2022-05-17)

  Bug Fixes

  • fix ref links inside table (#2471) (81daa2a)
• 4.0.15 - 2022-05-02
  

  4.0.15 (2022-05-02)

  Bug Fixes

  • list item bullet without whitespace (#2431) (9c10b4d)
• 4.0.14 - 2022-04-11
  

  4.0.14 (2022-04-11)

  Bug Fixes

  • only convert leading tabs to spaces (#1559) (#2434) (7d19665)
• 4.0.13 - 2022-04-08
  

  4.0.13 (2022-04-08)

  Bug Fixes

  • allow emStrong regex to consume more characters at once (#2433) (35583c3)
• 4.0.12 - 2022-01-27
  

  4.0.12 (2022-01-27)

  Bug Fixes

  • fix nbsp after table (#2372) (ed66bf8)

from marked GitHub release notes

Commit messages

Package name: marked

• 459085b chore(release): 4.0.18 [skip ci]
• 9fb5721 🗜️ build [skip ci]
• 01c98d1 fix: fix heading in list item (fix: MD028/no-blanks-blockquote nodejs/nodejs.org#2520)
• c906a1f chore(deps): Bump moment from 2.29.3 to 2.29.4 (Switch to Sass and Stylelint nodejs/nodejs.org#2530)
• 7b39f94 chore(deps-dev): Bump rollup from 2.75.7 to 2.76.0 (Stylus: always use variables for colors. nodejs/nodejs.org#2528)
• 9633c19 chore(deps-dev): Bump @ semantic-release/github from 8.0.4 to 8.0.5 (Switch to @stylint ignore statements. nodejs/nodejs.org#2529)
• 2e7c61d chore(deps-dev): Bump eslint from 8.18.0 to 8.19.0 (Replace i with em. nodejs/nodejs.org#2522)
• 3302455 chore(deps-dev): Bump @ babel/core from 7.18.5 to 7.18.6 (Use the same JS linting as the node repo nodejs/nodejs.org#2523)
• e5b9e1d chore(deps-dev): Bump eslint-plugin-n from 15.2.3 to 15.2.4 (Lint inline Markdown JS nodejs/nodejs.org#2524)
• 32fa61a chore(deps-dev): Bump @ babel/preset-env from 7.18.2 to 7.18.6 (Italian locale: remove non-translated files. nodejs/nodejs.org#2525)
• 1b0c7a9 chore(deps-dev): Bump uglify-js from 3.16.1 to 3.16.2 (Remove Ukrainian English files. nodejs/nodejs.org#2526)
• 0273ab8 chore(deps-dev): Bump @ rollup/plugin-commonjs from 22.0.0 to 22.0.1 (Add all external images to the repo. nodejs/nodejs.org#2515)
• 0a01d35 chore(deps-dev): Bump cheerio from 1.0.0-rc.11 to 1.0.0-rc.12 (Convert evolving-the-node-js-brand.md to Markdown. nodejs/nodejs.org#2514)
• 078352f chore(deps-dev): Bump jasmine from 4.2.0 to 4.2.1 (fix: Update ignore-option for markdownlint nodejs/nodejs.org#2507)
• b4cef48 chore(deps-dev): Bump eslint-plugin-n from 15.2.2 to 15.2.3 (fix: Convert HTML to MD for docs/index.md nodejs/nodejs.org#2508)
• 30ca672 chore(deps-dev): Bump uglify-js from 3.16.0 to 3.16.1 (Replace U+00A0 (NO-BREAK SPACE) with a normal space. nodejs/nodejs.org#2509)
• 7770183 chore(deps-dev): Bump eslint from 8.17.0 to 8.18.0 (Remove English commented out code from translations nodejs/nodejs.org#2510)
• 76cc22d chore(deps-dev): Bump rollup from 2.75.6 to 2.75.7 (pt-br: use the English classes for table. nodejs/nodejs.org#2511)
• a461ba1 chore(deps-dev): Bump rollup from 2.75.5 to 2.75.6 (write huge data into a file in crashes node nodejs/nodejs.org#2502)
• b36f1ff chore(deps-dev): Bump @ babel/core from 7.18.2 to 7.18.5 (Split npm scripts and run them in parallel nodejs/nodejs.org#2504)
• 132f963 chore(deps-dev): Bump rollup-plugin-license from 2.8.0 to 2.8.1 ([zh-tw] Translate security.md nodejs/nodejs.org#2503)
• 33de3a9 chore(deps-dev): Bump node-fetch from 3.2.5 to 3.2.6 (Find a way to check for extraneous escapes in code blocks nodejs/nodejs.org#2501)
• 745e116 chore(deps-dev): Bump jasmine from 4.1.0 to 4.2.0 (Update node-version-data to v1.1.0. nodejs/nodejs.org#2500)
• b02c58d chore(deps-dev): Bump eslint-plugin-n from 15.2.1 to 15.2.2 (KO : Update debugging-getting-started.md nodejs/nodejs.org#2499)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs