Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/03/28 2:45 p.m.28 views

Comrak AST node data is not validated (GHSL-2023-049)

Impact A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with parsedocument. This AST can then be converted to HTML via html::formatdocumentwithplugins. However, the HTML formatting code assumes that the AST is well-formed. For example, many AST notes...

9.8CVSS8.9AI score0.01268EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder