Lucene search
+L

70 matches found

OSV
OSV
•added 2026/07/24 6:35 p.m.•13 views

GO-2026-5208 Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown

Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown...

7.5CVSS6AI score0.00515EPSS
SaveExploits1References2
Veracode
Veracode
•added 2026/05/16 5:25 a.m.•20 views

Out-of-bounds Read

github.com/gomarkdown/markdown is vulnerable to an Out-of-Bounds Read. The vulnerability is due to improper handling of malformed Markdown input containing a character when processed by the SmartypantsRenderer, which allows an attacker to trigger an out-of-bounds read or cause the application to...

7.5CVSS6.2AI score0.00515EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2026/04/21 8:17 p.m.•29 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00515EPSS
SaveExploits1References2
osv-cve
osv-cve
•added 2026/04/21 7:51 p.m.•20 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS6.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/21 7:51 p.m.•12 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS6.1AI score0.00515EPSS
SaveExploits1References2
CVE
CVE
•added 2026/04/21 7:51 p.m.•44 views

CVE-2026-40890

CVE-2026-40890 affects github.com/gomarkdown/markdown. A malformed input containing a '' read by the SmartypantsRenderer can trigger an out-of-bounds read or a panic. The vulnerability is fixed in commit 759bbc3e32073c3bc4e25969c132fc520eda2778. Connected advisories confirm the same description a...

7.5CVSS6.1AI score0.00515EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2026/04/21 7:51 p.m.•28 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS6.1AI score0.00515EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/04/21 7:51 p.m.•53 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00515EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2026/04/21 7:51 p.m.•26 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS6.1AI score0.00515EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/14 10:38 p.m.•14 views

GHSA-77FJ-VX54-GVH7 Go Markdown has an Out-of-bounds Read in SmartypantsRenderer

Summary Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. Details The smartLeftAngle function in html/smartypants.go:367-376 performs an out-of-bounds slice operation when processing a characte...

7.5CVSS6.1AI score0.00515EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2026/04/14 10:38 p.m.•25 views

Go Markdown has an Out-of-bounds Read in SmartypantsRenderer

Summary Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. Details The smartLeftAngle function in html/smartypants.go:367-376 performs an out-of-bounds slice operation when processing a characte...

7.5CVSS6.1AI score0.00515EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•24 views

PT-2026-33236

Name of the Vulnerable Software and Affected Versions github.com/gomarkdown/markdown affected versions not specified Description Processing malformed input containing a character anywhere in the remaining text using a SmartypantsRenderer can lead to an Out of Bounds read or a panic. This occurs...

9.6CVSS6.3AI score0.00781EPSS
SaveExploits3References258
RedhatCVE
RedhatCVE
•added 2026/02/18 7:30 p.m.•17 views

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS8.2AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/17 3:16 p.m.•20 views

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS0.00168EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/17 12:00 a.m.•11 views

CVE-2024-31118: Missing Authorization

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS8.2AI score0.00168EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/17 12:00 a.m.•33 views

PT-2026-20211

Name of the Vulnerable Software and Affected Versions Smartypants SP Project & Document Manager versions through 4.70 Description An authorization issue exists in Smartypants SP Project & Document Manager. The issue involves incorrectly configured access control security levels, potentially...

6.5CVSS5.4AI score0.00168EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-22231

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00544EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-30353

Malicious code in bioql PyPI...

7.6CVSS6.4AI score0.00486EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-34504

Malicious code in bioql PyPI...

6.3CVSS6.4AI score0.00351EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2023-40479

Malicious code in bioql PyPI...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder