An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| comrak(crates.io) | 0 | 0.9.1 | N/A |
CVSS Metrics
