CVE-2023-28626

Name of the Vulnerable Software and Affected Versions comrak versions prior to 0.17.0

Description The issue concerns quadratic parsing problems in comrak, a CommonMark + GFM compatible Markdown parser and renderer written in rust. These problems can be exploited to craft denial-of-service attacks on services that use comrak to parse Markdown.

Recommendations For versions prior to 0.17.0, upgrade to version 0.17.0 to address the quadratic parsing issues. As a temporary workaround, consider restricting the use of comrak for parsing Markdown until the issue is resolved. Avoid using comrak to parse potentially malicious Markdown input until the issue is fixed.