crates.io/comrak: medium 5.3

Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)

Action: Upgrade comrak to 0.17.0 or later.

cargo update -p comrak --precise 0.17.0

Affected

Fixed versions

Sources

• osv: GHSA-xxmq-4vph-956w
• https://github.com/kivikakk/comrak/security/advisories/GHSA-xxmq-4vph-956w
• https://github.com/commonmark/cmark/issues/354
• https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a
• https://github.com/kivikakk/comrak
• https://github.com/kivikakk/comrak/releases/tag/0.17.0

published 2023-03-28T14:44:04Z · modified 2023-03-28T14:44:04Z · JSON