Lucene search
K

6 matches found

OSV
OSV
added 2026/04/21 8:17 p.m.1 views

DEBIAN-CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.3AI score0.00074EPSS
Exploits1References1
NVD
NVD
added 2026/04/21 8:17 p.m.3 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00074EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/04/21 7:51 p.m.2 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.3AI score0.00074EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2025/09/04 3:31 a.m.3 views

The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical problem in the paragraph function of the parser/block.go file, which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely. Submit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252` contains fixes to this problem.

...

5.1CVSS7AI score0.03663EPSS
Exploits1
OSV
OSV
added 2023/09/22 5:15 p.m.3 views

AZL-39828 CVE-2023-42821 affecting package cri-o for versions less than 1.21.7-2

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion 0.0.0-20230922105210-14b16010c2ee, which corresponds with commit 14b16010c2ee7ff33a940a541d993bd043a88940, parsing malformed markdown input with parser that uses...

7.5CVSS7.1AI score0.00483EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/09/22 12:0 a.m.4 views

PT-2023-28606 · Unknown +1 · Gomarkdown/Markdown +1

Name of the Vulnerable Software and Affected Versions: github.com/gomarkdown/markdown versions prior to 0.0.0-20230922105210-14b16010c2ee Description: The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Parsing malformed markdown input with ...

7.5CVSS7.3AI score0.00483EPSS
Exploits1References19
Rows per page
Query Builder