diff --git a/flake.lock b/flake.lock
index b5d0b881c..c88f1124a 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1,5 +1,21 @@
 {
   "nodes": {
+    "cmark": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1706295831,
+        "narHash": "sha256-nEI85W8w49ZVr17ycO+7aZvcgA3U2QphNZGrfQl2mSk=",
+        "owner": "commonmark",
+        "repo": "cmark",
+        "rev": "cd37711b8a08da67ba4e21a42614b86dd8def929",
+        "type": "github"
+      },
+      "original": {
+        "owner": "commonmark",
+        "repo": "cmark",
+        "type": "github"
+      }
+    },
     "flake-compat": {
       "flake": false,
       "locked": {
@@ -128,6 +144,7 @@
     },
     "root": {
       "inputs": {
+        "cmark": "cmark",
         "flake-compat": "flake-compat",
         "flake-parts": "flake-parts",
         "git-hooks-nix": "git-hooks-nix",
diff --git a/flake.nix b/flake.nix
index 303779c2b..5612de834 100644
--- a/flake.nix
+++ b/flake.nix
@@ -6,6 +6,8 @@
   inputs.nixpkgs-23-11.url = "github:NixOS/nixpkgs/a62e6edd6d5e1fa0329b8653c801147986f8d446";
   inputs.flake-compat = { url = "github:edolstra/flake-compat"; flake = false; };
   inputs.libgit2 = { url = "github:libgit2/libgit2/v1.8.1"; flake = false; };
+  # Until https://github.com/commonmark/cmark/pull/524 is released
+  inputs.cmark = { url = "github:commonmark/cmark"; flake = false; };
 
   # dev tooling
   inputs.flake-parts.url = "github:hercules-ci/flake-parts";
diff --git a/packaging/dependencies.nix b/packaging/dependencies.nix
index e5f4c0f91..abe5b1521 100644
--- a/packaging/dependencies.nix
+++ b/packaging/dependencies.nix
@@ -140,6 +140,11 @@ scope: {
       ];
   });
 
+  cmark = pkgs.cmark.overrideAttrs (_: {
+    src = inputs.cmark;
+    version = inputs.lastModifiedDate;
+  });
+
   busybox-sandbox-shell = pkgs.busybox-sandbox-shell or (pkgs.busybox.override {
     useMusl = true;
     enableStatic = true;