CVE-2021-38186

MEDIUM CVSS: 6.1 Published: 2021-08-08 Modified: 2026-06-17

Description

An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.

Affected Platforms

Comrak Project Comrak

Weakness Type

CWE-79

References