Lucene search

K
osvGoogleOSV:CVE-2021-38186
HistoryAug 08, 2021 - 6:15 a.m.

CVE-2021-38186

2021-08-0806:15:08
Google
osv.dev
2

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%