CyberSecBulletin

Kivikakk vulnerabilities

We track 2 vulnerabilities in Kivikakk products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Kivikakk vulnerabilities

  • 9.8 Critical severity

    comrak: Improper Handling of Exceptional Conditions

    CVE-2023-28631KivikakkEPSS 1.27%

    comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with `parse_document`. This AST can then be converted to HTML via `html::format_d

  • 7.5 High severity

    comrak: Uncontrolled Resource Consumption

    CVE-2023-28626KivikakkEPSS 1.12%

    comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A range of quadratic parsing issues are present in Comrak. These can be used to craft denial-of-service attacks on services that use Comrak to parse Markdown. This issue has