Lucene search
+L

6 matches found

osv_debian
osv_debian
•added 2026/04/21 8:17 p.m.•13 views

DEBIAN-CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.9AI score0.00346EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/21 8:17 p.m.•31 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00346EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/04/21 7:51 p.m.•32 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.9AI score0.00346EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2025/09/04 3:31 a.m.•23 views

The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical problem in the paragraph function of the parser/block.go file, which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely. Submit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252` contains fixes to this problem.

...

5.1CVSS6AI score0.00501EPSS
SaveExploits1
osv_azl
osv_azl
•added 2023/09/22 5:15 p.m.•26 views

AZL-39828 CVE-2023-42821 affecting package cri-o for versions less than 1.21.7-2

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion 0.0.0-20230922105210-14b16010c2ee, which corresponds with commit 14b16010c2ee7ff33a940a541d993bd043a88940, parsing malformed markdown input with parser that uses...

7.5CVSS7AI score0.01252EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/09/22 12:00 a.m.•16 views

PT-2023-28606

Name of the Vulnerable Software and Affected Versions github.com/gomarkdown/markdown versions prior to 0.0.0-20230922105210-14b16010c2ee Description The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Parsing malformed markdown input with a...

9.8CVSS6AI score0.01252EPSS
SaveExploits1References60
Rows per page
Query Builder