crates.io/mdBook CVE-2020-26297: high 8.2, EPSS 1.27%

XSS in mdBook

Action: Upgrade mdBook to 0.4.5 or later.

cargo update -p mdBook --precise 0.4.5

Affected

Fixed versions

Sources

• osv: GHSA-gx5w-rrhp-f436
• https://github.com/rust-lang/mdBook/security/advisories/GHSA-gx5w-rrhp-f436
• https://nvd.nist.gov/vuln/detail/CVE-2020-26297
• https://github.com/rust-lang/mdBook/commit/32abeef088e98327ca0dfccdad92e84afa9d2e9b
• https://github.com/rust-lang/mdBook
• https://github.com/rust-lang/mdBook/blob/master/CHANGELOG.md#mdbook-045
• https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0
• https://rustsec.org/advisories/RUSTSEC-2021-0001.html

CVE-2020-26297 · published 2021-08-25T20:56:20Z · modified 2026-09-10T03:49:07.989016522Z · JSON