Skip to main content
← crates.io

comrak

4 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 medium
Registry
crates.io

Advisories 4

  • CVE-2023-28631Medium 5.3

    Attacker controlled data in AST nodes is not validated in comrak

    Affected: fixed in 0.17.0.

  • CVE-2023-28626Medium 5.3

    Quadratic runtime when parsing Markdown in comrak

    Affected: fixed in 0.17.0.

  • An issue was discovered in the comrak crate before 0.10.1 for Rust.

    Affected: fixed in 0.10.1; fixed in 0.10.1.

  • An issue was discovered in the comrak crate before 0.9.1 for Rust.

    Affected: fixed in 0.9.1; fixed in 0.9.1.