pulldown-cmark vulnerabilities
CVEs whose affected-version data names the pulldown-cmark package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
RUSTSEC-2026-0433High· 7.5Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`
Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`
▾ Twilightpulldown-cmark · pulldown-cmarkvia OSV
RUSTSEC-2026-0414High· 7.5Exponential event growth with `ENABLE_WIKILINKS`
Exponential event growth with `ENABLE_WIKILINKS`
▾ Twilightpulldown-cmark · pulldown-cmarkvia OSV