Skip to content

Upgrading pulldown-cmark 0.12 to 0.13

Breaking0.12.2 → 0.13.6Breaking3Security4New1Changed3Fixed7Other10

Full comparisonBack to pulldown-cmark
Fetching 7 releases from GitHub…6 / 7
BreakingUpgrade verdict

3 breaking changes and 4 security fixes.

In plain terms
  • Text marked for superscript or subscript is now recognized, which can change how some documents are parsed.
  • A new wiki-style link syntax is supported when the matching option is turned on.
  • The command line flag for subscript has changed, so scripts using the old flag must be updated.
  • This update closes some security holes that were already patched in the project's main development branch.
Must act Top 5 of 7 that need code or config changes

What you must change

Breaking3
Adds superscript and subscript support, which changes parsing behavior.
0.13.0GitHub ReleaseSummarizedView source
Implements the WikiLinks extension behind Options::ENABLE_WIKILINKS.
Options::ENABLE_WIKILINKS
0.13.0GitHub ReleaseSummarizedView source
Changes the subscript CLI flag to -B.
-B
0.13.0GitHub ReleaseSummarizedView source
Security4
Fixes security issues that were already fixed on the main branch.
0.13.5GitHub ReleaseSummarizedView source
Exponential event growth with ENABLE_WIKILINKS
High · CVSS 7.5
0.13.5OSV advisoryOriginalView source
Bumps tar to 0.4.45.
tar
0.13.2GitHub ReleaseSummarizedView source
Fixes an out-of-bounds access caused by an erroneous shift in process_mask.
process_mask
0.13.0GitHub ReleaseSummarizedView source