Description
An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | comrak | < 0.10.1 | 0.10.1 | GHSA-6wj2-g87r-pm62 |
| crates.io | comrak | >= 0.0.0-0, < 0.10.1 | 0.10.1 | RUSTSEC-2021-0063 |