Gomarkdown vulnerabilities
We track 3 vulnerabilities in Gomarkdown products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Gomarkdown vulnerabilities
- 7.5 High severity
markdown: Out-of-bounds Read
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[:nPath] before the len(url) >= nPath guard. A short destinat
- 7.5 High severity
markdown: Out-of-bounds Read
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a < character that is not followed by a > character anywhere in the remaining text with a SmartypantsRenderer
- 7.5 High severity
markdown: Out-of-bounds Read
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b16010c2ee`, which corresponds with commit `14b16010c2ee7ff33a940a541d993bd043a88940`, parsing malforme