Go/github.com/gomarkdown/markdown CVE-2026-40890: unknown, EPSS 0.35%
Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown
Action: Upgrade github.com/gomarkdown/markdown to 0.0.0-20260411013819-759bbc3e3207 or later.
go get github.com/gomarkdown/markdown@v0.0.0-20260411013819-759bbc3e3207Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260411013819-759bbc3e3207 |
Sources
- osv: GO-2026-5208
- https://github.com/gomarkdown/markdown/security/advisories/GHSA-77fj-vx54-gvh7
- https://github.com/gomarkdown/markdown/commit/759bbc3e32073c3bc4e25969c132fc520eda2778
CVE-2026-40890 · published · modified · JSON