Comrak Project Comrak — known CVE vulnerabilities

Every CVE whose affected-product data names Comrak Project Comrak, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-27671 — CVSS 6.1 (medium): An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript…
• CVE-2021-38186 — CVSS 6.1 (medium): An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.
• CVE-2023-28626 — CVSS 5.3 (medium): comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A range of quadratic parsing issues are present in…
• CVE-2023-28631 — CVSS 5.3 (medium): comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program…