comrak
CommonMark + GFM compatible Markdown parser and renderer
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 101
- Cadence
- ~21 days
- Last 12 months
- 13
Reach
- Downloads
- 7.5M
- Stars
- 1.7k
Details
- License
- BSD-2-Clause
- First release
- Apr 07, 2017
| Version | Released | |
|---|---|---|
0.55.0
minor
|
0.55.0
minor
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.54.0
unknown
|
0.54.0
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.53.0
unknown
|
0.53.0
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.52.0
unknown
|
0.52.0
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.51.0
unknown
|
0.51.0
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.50.0
unknown
|
0.50.0
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.49.0
unknown
|
0.49.0
unknown
Dependencies (19)
+ 11 more
Changelog
Compare changes
|
|
0.48.0
unknown
|
0.48.0
unknown
Dependencies (19)
+ 11 more
Changelog
Compare changes
|
|
0.47.0
unknown
|
0.47.0
unknown
Dependencies (19)
+ 11 more
Changelog
Compare changes
|
|
0.46.0
unknown
|
0.46.0
unknown
Dependencies (19)
+ 11 more
Changelog
Compare changes
|
|
0.45.0
unknown
|
0.45.0
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.45.0-rc.1
unknown
|
0.45.0-rc.1
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.44.0
unknown
| ||
0.43.0
unknown
| ||
0.42.0
unknown
| ||
0.41.1
unknown
| ||
0.41.0
unknown
| ||
0.40.0
unknown
| ||
0.39.1
unknown
| ||
0.39.0
unknown
| ||
0.38.0
unknown
| ||
0.37.0
unknown
| ||
0.36.0
unknown
| ||
0.35.0
unknown
| ||
0.34.0
unknown
| ||
0.33.0
unknown
| ||
0.32.0
unknown
| ||
0.31.0
unknown
| ||
0.30.0
unknown
| ||
0.29.0
unknown
|
0.29.0
unknown
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.28.0
unknown
|
0.28.0
unknown
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.27.0
unknown
|
0.27.0
unknown
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.26.0
unknown
|
0.26.0
unknown
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.25.0
unknown
|
0.25.0
unknown
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.24.1
unknown
|
0.24.1
unknown
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.23.1-pre.3
unknown
|
0.23.1-pre.3
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.23.1-pre.2
unknown
|
0.23.1-pre.2
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.23.0
unknown
|
0.23.0
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.22.0
unknown
|
0.22.0
unknown
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.21.0
unknown
|
0.21.0
unknown
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.20.0
unknown
|
0.20.0
unknown
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.19.0
unknown
|
0.19.0
unknown
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.18.0
unknown
|
0.18.0
unknown
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.17.1
unknown
|
0.17.1
unknown
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.17.0
unknown
|
0.17.0
unknown
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
0.16.0
unknown
3 CVEs
CVE-2023-28631
GHSA-5r3x-p7xx-x6q5
Mar 28, 2023
Comrak AST node data is not validated (GHSL-2023-049)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA Comrak AST can be constructed manually by a program instead of parsing a Markdown document with Patches0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Workarounds
Referencesn/a Fixed in
0.17.0
References
Updated Sep 10, 2026 · Source: OSV.dev
GHSA-xxmq-4vph-956w
Mar 28, 2023
Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
Impactcomrak is vulnerable to the upstream cmark issue, "Issue revealed by fuzzer". A large number of references in a markdown document can trigger an overly large response. Patches0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits reference output to a 100Kb maximum. Workaroundsn/a References
Fixed in
0.17.0
References Updated Mar 28, 2023 · Source: OSV.dev
CVE-2023-28626
GHSA-8hqf-xjwp-p67v
Mar 28, 2023
Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA range of quadratic parsing issues from Patches0.17.0 contains fixes to known quadratic parsing issues. Workaroundsn/a References
Fixed in
0.17.0
References
Updated Nov 08, 2023 · Source: OSV.dev | ||
0.15.0
unknown
3 CVEs
CVE-2023-28631
GHSA-5r3x-p7xx-x6q5
Mar 28, 2023
Comrak AST node data is not validated (GHSL-2023-049)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA Comrak AST can be constructed manually by a program instead of parsing a Markdown document with Patches0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Workarounds
Referencesn/a Fixed in
0.17.0
References
Updated Sep 10, 2026 · Source: OSV.dev
GHSA-xxmq-4vph-956w
Mar 28, 2023
Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
Impactcomrak is vulnerable to the upstream cmark issue, "Issue revealed by fuzzer". A large number of references in a markdown document can trigger an overly large response. Patches0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits reference output to a 100Kb maximum. Workaroundsn/a References
Fixed in
0.17.0
References Updated Mar 28, 2023 · Source: OSV.dev
CVE-2023-28626
GHSA-8hqf-xjwp-p67v
Mar 28, 2023
Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA range of quadratic parsing issues from Patches0.17.0 contains fixes to known quadratic parsing issues. Workaroundsn/a References
Fixed in
0.17.0
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.15.0
unknown
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
0.14.0
unknown
3 CVEs
CVE-2023-28631
GHSA-5r3x-p7xx-x6q5
Mar 28, 2023
Comrak AST node data is not validated (GHSL-2023-049)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA Comrak AST can be constructed manually by a program instead of parsing a Markdown document with Patches0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Workarounds
Referencesn/a Fixed in
0.17.0
References
Updated Sep 10, 2026 · Source: OSV.dev
GHSA-xxmq-4vph-956w
Mar 28, 2023
Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
Impactcomrak is vulnerable to the upstream cmark issue, "Issue revealed by fuzzer". A large number of references in a markdown document can trigger an overly large response. Patches0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits reference output to a 100Kb maximum. Workaroundsn/a References
Fixed in
0.17.0
References Updated Mar 28, 2023 · Source: OSV.dev
CVE-2023-28626
GHSA-8hqf-xjwp-p67v
Mar 28, 2023
Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA range of quadratic parsing issues from Patches0.17.0 contains fixes to known quadratic parsing issues. Workaroundsn/a References
Fixed in
0.17.0
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.14.0
unknown
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
0.13.2
unknown
3 CVEs
CVE-2023-28631
GHSA-5r3x-p7xx-x6q5
Mar 28, 2023
Comrak AST node data is not validated (GHSL-2023-049)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA Comrak AST can be constructed manually by a program instead of parsing a Markdown document with Patches0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Workarounds
Referencesn/a Fixed in
0.17.0
References
Updated Sep 10, 2026 · Source: OSV.dev
GHSA-xxmq-4vph-956w
Mar 28, 2023
Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
Impactcomrak is vulnerable to the upstream cmark issue, "Issue revealed by fuzzer". A large number of references in a markdown document can trigger an overly large response. Patches0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits reference output to a 100Kb maximum. Workaroundsn/a References
Fixed in
0.17.0
References Updated Mar 28, 2023 · Source: OSV.dev
CVE-2023-28626
GHSA-8hqf-xjwp-p67v
Mar 28, 2023
Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA range of quadratic parsing issues from Patches0.17.0 contains fixes to known quadratic parsing issues. Workaroundsn/a References
Fixed in
0.17.0
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.13.2
unknown
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
0.13.1
unknown
3 CVEs
CVE-2023-28631
GHSA-5r3x-p7xx-x6q5
Mar 28, 2023
Comrak AST node data is not validated (GHSL-2023-049)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA Comrak AST can be constructed manually by a program instead of parsing a Markdown document with Patches0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Workarounds
Referencesn/a Fixed in
0.17.0
References
Updated Sep 10, 2026 · Source: OSV.dev
GHSA-xxmq-4vph-956w
Mar 28, 2023
Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
Impactcomrak is vulnerable to the upstream cmark issue, "Issue revealed by fuzzer". A large number of references in a markdown document can trigger an overly large response. Patches0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits reference output to a 100Kb maximum. Workaroundsn/a References
Fixed in
0.17.0
References Updated Mar 28, 2023 · Source: OSV.dev
CVE-2023-28626
GHSA-8hqf-xjwp-p67v
Mar 28, 2023
Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
5.3
/ 10
Medium
Network
Low
None
None
Unchanged
None
None
Low
ImpactA range of quadratic parsing issues from Patches0.17.0 contains fixes to known quadratic parsing issues. Workaroundsn/a References
Fixed in
0.17.0
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.13.1
unknown
Dependencies (14)
+ 6 more
Changelog
Compare changes
|