A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
grypeCVE-2026-56852EPSS 0.4%
Go Markdown has an Out-of-bounds Read in SmartypantsRenderer
grypeCVE-2026-40890EPSS 0.4%
Markdown vulnerable to Out-of-bounds Read while parsing citations
grypeCVE-2023-42821EPSS 1.0%
A norm.Iter can enter an infinite loop when handling input containing ...
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
trivyCVE-2026-56852
github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a < character that is not followed by a > character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of …
trivyCVE-2026-40890
The package `github.com/gomarkdown/markdown` is a Go library for parsi ...
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b16010c2ee`, which corresponds with commit `14b16010c2ee7ff33a940a541d993bd043a88940`, parsing malformed markdown input wit…
trivyCVE-2023-42821