Lucene search
K

57 matches found

NVD
NVD
added 2026/04/21 8:17 p.m.3 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00074EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/21 7:51 p.m.29 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00074EPSS
Exploits1References2
CVE
CVE
added 2026/04/21 7:51 p.m.8 views

CVE-2026-40890

CVE-2026-40890 affects github.com/gomarkdown/markdown. A malformed input containing a '' read by the SmartypantsRenderer can trigger an out-of-bounds read or a panic. The vulnerability is fixed in commit 759bbc3e32073c3bc4e25969c132fc520eda2778. Connected advisories confirm the same description a...

7.5CVSS5.7AI score0.00074EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/21 7:51 p.m.0 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.8AI score0.00074EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2026/04/21 7:51 p.m.0 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.3AI score0.00074EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/04/21 7:51 p.m.2 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.3AI score0.00074EPSS
Exploits1
OSV
OSV
added 2026/04/14 10:38 p.m.0 views

GHSA-77FJ-VX54-GVH7 Go Markdown has an Out-of-bounds Read in SmartypantsRenderer

Summary Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. Details The smartLeftAngle function in html/smartypants.go:367-376 performs an out-of-bounds slice operation when processing a characte...

7.5CVSS5.8AI score0.00074EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/04/14 10:38 p.m.4 views

Go Markdown has an Out-of-bounds Read in SmartypantsRenderer

Summary Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. Details The smartLeftAngle function in html/smartypants.go:367-376 performs an out-of-bounds slice operation when processing a characte...

7.5CVSS5.8AI score0.00074EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-33236

Name of the Vulnerable Software and Affected Versions github.com/gomarkdown/markdown affected versions not specified Description Processing malformed input containing a character anywhere in the remaining text using a SmartypantsRenderer can lead to an Out of Bounds read or a panic. This occurs...

7.5CVSS5.2AI score0.00074EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/02/18 7:30 p.m.1 views

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS5.5AI score0.00068EPSS
Exploits0References1
NVD
NVD
added 2026/02/17 3:16 p.m.4 views

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS0.00068EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/17 12:0 a.m.4 views

PT-2026-20211

Name of the Vulnerable Software and Affected Versions Smartypants SP Project & Document Manager versions through 4.70 Description An authorization issue exists in Smartypants SP Project & Document Manager. The issue involves incorrectly configured access control security levels, potentially...

6.5CVSS5.4AI score0.00068EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-37763

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.0021EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-40479

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00079EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-30353

Malicious code in bioql PyPI...

7.6CVSS6.4AI score0.00405EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-34504

Malicious code in bioql PyPI...

6.3CVSS6.4AI score0.00066EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-40620

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00149EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-22231

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00284EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:58 a.m.5 views

CVE-2024-33923

Missing Authorization vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager : from n/a through 4.69...

6.3CVSS5.2AI score0.00066EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:3 a.m.7 views

CVE-2023-36677

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Smartypants SP Project & Document Manager allows SQL Injection.This issue affects SP Project & Document Manager: from n/a through 4.67...

8.8CVSS8.3AI score0.00149EPSS
Exploits0References1
Rows per page
Query Builder