Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
Impactcomrak is vulnerable to the upstream cmark issue, ["Issue revealed by fuzzer"](https://github.com/commonmark/cmark/issues/354). A large number of references in a markdown document can trigger an overly large response.Patches0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits reference output to a 100Kb maximum.Workaroundsn/aReferenceshttps://github.com/commonmark/cmark/issues/354