Lucene search
+L

60 matches found

OSV
OSV
•added 2026/07/24 6:35 p.m.•11 views

GO-2026-5208 Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown

Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown...

7.5CVSS5.8AI score0.00515EPSS
SaveExploits1References2
Veracode
Veracode
•added 2026/05/16 5:25 a.m.•19 views

Out-of-bounds Read

github.com/gomarkdown/markdown is vulnerable to an Out-of-Bounds Read. The vulnerability is due to improper handling of malformed Markdown input containing a character when processed by the SmartypantsRenderer, which allows an attacker to trigger an out-of-bounds read or cause the application to...

7.5CVSS5.9AI score0.00515EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2026/04/21 8:17 p.m.•22 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00515EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/04/21 7:51 p.m.•10 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.8AI score0.00515EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/04/21 7:51 p.m.•21 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.3AI score0.00515EPSS
SaveExploits1
CVE
CVE
•added 2026/04/21 7:51 p.m.•38 views

CVE-2026-40890

CVE-2026-40890 affects github.com/gomarkdown/markdown. A malformed input containing a '' read by the SmartypantsRenderer can trigger an out-of-bounds read or a panic. The vulnerability is fixed in commit 759bbc3e32073c3bc4e25969c132fc520eda2778. Connected advisories confirm the same description a...

7.5CVSS5.7AI score0.00515EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
•added 2026/04/21 7:51 p.m.•21 views

CVE-2026-40890

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS5.3AI score0.00515EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/21 7:51 p.m.•15 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS6.1AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/21 7:51 p.m.•47 views

CVE-2026-40890 github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. This vulnerability is fixed with...

7.5CVSS0.00515EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2026/04/14 10:38 p.m.•17 views

Go Markdown has an Out-of-bounds Read in SmartypantsRenderer

Summary Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. Details The smartLeftAngle function in html/smartypants.go:367-376 performs an out-of-bounds slice operation when processing a characte...

7.5CVSS5.8AI score0.00515EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/04/14 10:38 p.m.•11 views

GHSA-77FJ-VX54-GVH7 Go Markdown has an Out-of-bounds Read in SmartypantsRenderer

Summary Processing a malformed input containing a character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. Details The smartLeftAngle function in html/smartypants.go:367-376 performs an out-of-bounds slice operation when processing a characte...

7.5CVSS5.8AI score0.00515EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•19 views

PT-2026-33236

Name of the Vulnerable Software and Affected Versions github.com/gomarkdown/markdown affected versions not specified Description Processing malformed input containing a character anywhere in the remaining text using a SmartypantsRenderer can lead to an Out of Bounds read or a panic. This occurs...

9.1CVSS5.2AI score0.01625EPSS
SaveExploits2References25
RedhatCVE
RedhatCVE
•added 2026/02/18 7:30 p.m.•13 views

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS5.5AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/17 3:16 p.m.•14 views

CVE-2024-31118

Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70...

6.5CVSS0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/17 12:00 a.m.•26 views

PT-2026-20211

Name of the Vulnerable Software and Affected Versions Smartypants SP Project & Document Manager versions through 4.70 Description An authorization issue exists in Smartypants SP Project & Document Manager. The issue involves incorrectly configured access control security levels, potentially...

6.5CVSS5.4AI score0.00164EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-40620

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.0072EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2022-37763

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00619EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-34504

Malicious code in bioql PyPI...

6.3CVSS6.4AI score0.00353EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-30353

Malicious code in bioql PyPI...

7.6CVSS6.4AI score0.00486EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-22231

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00544EPSS
SaveExploits0References1
Rows per page
Query Builder