TI-2023-13150 CVE-2023-28631 · GHSA-5r3x-p7xx-x6q5
Attacker controlled data in AST nodes is not validated in comrak
Priority MEDIUM 51
comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust.
Comrak Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Comrak Project records in CISA KEVNo Comrak Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2023-13145 CVE-2023-28626 · GHSA-8hqf-xjwp-p67v
Quadratic runtime when parsing Markdown in comrak
Priority MEDIUM 41
comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust.
TI-2021-15863 CVE-2021-38186 · GHSA-6wj2-g87r-pm62
An issue was discovered in the comrak crate before 0.10.1 for Rust.
Priority LOW 29
An issue was discovered in the comrak crate before 0.10.1 for Rust.
TI-2021-09116 CVE-2021-27671 · GHSA-xmr7-v725-2jjr
An issue was discovered in the comrak crate before 0.9.1 for Rust.
Priority LOW 28
An issue was discovered in the comrak crate before 0.9.1 for Rust.