Rust advisories / crate
Security history · comrak · data from Oct 24, 2026
Is comrak safe to use? Its security history
VerdictNo open advisories. 5 past vulnerabilities were fixed; use 0.10.1 or newer to be clear of all of them.
5advisories on record
5vulnerabilities
0unmaintained notices
0.10.1newest fixed version
Every advisory, newest first
- VulnerabilityGHSA-5r3x-p7xx-x6q5 · 2023-03-28Comrak AST node data is not validated (GHSL-2023-049)
- VulnerabilityGHSA-xxmq-4vph-956w · 2023-03-28Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
- VulnerabilityGHSA-8hqf-xjwp-p67v · 2023-03-28Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
- VulnerabilityRUSTSEC-2021-0063 · 2021-05-04XSS in `comrak`
- Vulnerability MediumRUSTSEC-2021-0026 · 2021-02-21XSS in `comrak`
Check your version
Run cargo tree -i comrak to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?