Skip to main content

Comrak Project

4 CVEs vendor

Monthly

CVE-2023-28631 Mar 28, 21:15 Cargo CRITICAL PATCH Act Now

comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Comrak Comrak Project
NVD GitHub
CVSS 3.1
9.8
EPSS
1.3%
CVE-2023-28626 Mar 28, 21:15 Cargo HIGH PATCH This Week

comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Comrak Comrak Project
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-38186 Aug 08, 06:15 Cargo MEDIUM POC PATCH This Month

An issue was discovered in the comrak crate before 0.10.1 for Rust. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Comrak Comrak Project
NVD
CVSS 3.1
6.1
EPSS
0.7%
CVE-2021-27671 Feb 25, 01:15 Cargo MEDIUM PATCH This Month

An issue was discovered in the comrak crate before 0.9.1 for Rust. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Comrak Comrak Project
NVD
CVSS 3.1
6.1
EPSS
0.7%
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Comrak Comrak Project
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Comrak Comrak Project
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

An issue was discovered in the comrak crate before 0.10.1 for Rust. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Comrak Comrak Project
NVD
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

An issue was discovered in the comrak crate before 0.9.1 for Rust. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Comrak Comrak Project
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy