Vulnerability

[navjotjsingh]

Getting this on running npm audit

Low │ Regular Expression Denial of Service │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ marked │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.7.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ hexo-renderer-marked │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ hexo-renderer-marked > marked │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/1076 │
└───────────────┴──────────────────────────────────────────────────────────────┘

Please check.

[tomap]

Fixed by #102
Most vulnerability you'll see on npm don't apply to hexo due to the simple context where they occur. But still it is a good pratice
We will need to publish a new version so you can see the fix, or in the meantime, you can use "hexojs/hexo-renderer-marked" instead of the version number "^1.0.1"
and run npm i

[curbengh]

To be closed once v2 stable is released.

[curbengh]

v2 stable released
#108
#108