[comrak] project proposal
Approved by https://github.com/kivikakk/comrak/issues/474#issue-2576801537.
comrak is one of three go-to choices for markdown rendering for rust. It is similar to markdown-rs and pulldown-cmark.
It can accept user input (most notably in CMS systems built on top of rust, i.e. https://github.com/ohsayan/jotsy) and can act as a vector for availability attacks. Ruby's commonmarker also depends on it.
Despite its non-0.7 criticality score, it one of two good choices for markdown parsing in rust makes it a good candidate for fuzzing.
LeoDog896 is integrating a new project:
- Main repo: https://github.com/kivikakk/comrak.git
- Criticality score: 0.60584
Clusterfuzz Lite is a more appropriate solution, closing for now.