comrak vulnerabilities

2 known vulnerabilities in comrak from Kivikakk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  comrak: Improper Handling of Exceptional Conditions

  CVE-2023-28631Mar 28, 2023KivikakkEPSS 1.27%

  comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with `parse_document`. This AST can then be converted to HTML via `html::format_d

• 7.5 High severity

  comrak: Uncontrolled Resource Consumption

  CVE-2023-28626Mar 28, 2023KivikakkEPSS 1.12%

  comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A range of quadratic parsing issues are present in Comrak. These can be used to craft denial-of-service attacks on services that use Comrak to parse Markdown. This issue has