CVE-2023-42821

CVE-2023-42821 affects the Go library github.com/gomarkdown/markdown. A vulnerability in parsing malformed Markdown with the Mmark extension can cause an out-of-bounds read, triggering a panic/denial of service inside citation.go at line 69 when access goes past the slice. A patch was applied in ...

CVE-2026-40890

CVE-2026-40890 affects github.com/gomarkdown/markdown. A malformed input containing a '' read by the SmartypantsRenderer can trigger an out-of-bounds read or a panic. The vulnerability is fixed in commit 759bbc3e32073c3bc4e25969c132fc520eda2778. Connected advisories confirm the same description a...