Comrak Security Vulnerabilities and Issues — Comrak CVE List

Lucene search

Comrak ProjectComrak

2 matches found

CVE•added 2021/08/08 6:15 a.m.•98 views

CVE-2021-38186

An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.

6.1CVSS5.8AI score0.00201EPSS

CVE•added 2021/02/25 1:15 a.m.•82 views

CVE-2021-27671

An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.

6.1CVSS5.9AI score0.00216EPSS