The comrak we were matching unsafe URL prefixes, such as data: or javascript: , in a case-sensitive manner. This meant prefixes like Data: were untouched...
6.1CVSS6.1AI score0.00686EPSS
SaveExploits0References3
Mend•added 2021/02/21 12:00 a.m.•2 views
WS-2021-0024
In the RUST package comrak through 0.9.0 exists unsafe URL prefixes, such as data: or javascript: , in a case-sensitive manner. This meant prefixes like Data: were untouched. Fixed in 0.9.1...
