Go/github.com/k1LoW/mo: unknown

mo has a XSS via inline SVG script tags in Markdown rendering in github.com/k1LoW/mo

Action: Upgrade github.com/k1LoW/mo to 0.18.5 or later.

go get github.com/k1LoW/mo@v0.18.5

Affected

Fixed versions

Sources

• osv: GO-2026-4765
• https://github.com/k1LoW/mo/security/advisories/GHSA-vccx-p757-pv6h

published 2026-03-23T18:14:51Z · modified 2026-03-23T18:45:18.870859Z · JSON