1 matches found
Comrak AST node data is not validated (GHSL-2023-049)
Impact A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with parsedocument. This AST can then be converted to HTML via html::formatdocumentwithplugins. However, the HTML formatting code assumes that the AST is well-formed. For example, many AST notes...
9.8CVSS8.9AI score0.01268EPSS
SaveExploits0References8Affected Software1
20