GHSA-M9XQ-6H2J-65R2 Markdown vulnerable to Out-of-bounds Read while parsing citations

Summary Parsing malformed markdown input with parser that uses parser.Mmark extension could result in out-of-bounds read vulnerability. Details To exploit the vulnerability, parser needs to have parser.Mmark extension set. The panic occurs inside the citation.go file on the line 69 when the parse...

PT-2023-28606 · Unknown +1 · Gomarkdown/Markdown +1

Name of the Vulnerable Software and Affected Versions: github.com/gomarkdown/markdown versions prior to 0.0.0-20230922105210-14b16010c2ee Description: The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Parsing malformed markdown input with ...