| Package | Affected versions | Patched versions |
|---|---|---|
| comrak | < 0.9.1 | 0.9.1 |
An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free