{"action":"Upgrade github.com/gomarkdown/markdown to 0.0.0-20240729212818-a2a9c4f76ef5 or later.","affected":[{"introduced":"0"}],"component":"github.com/gomarkdown/markdown","cve_ids":["CVE-2024-44337"],"ecosystem":"Go","epss":0.00501,"exploited":false,"fixed_versions":["0.0.0-20240729212818-a2a9c4f76ef5"],"ghsa_id":"GHSA-xhr3-wf7j-h255","id":"tcs_01M5KFSBGF0S2NWQ0E4CJBPZ9P","modified_at":"2026-09-10T03:50:20.197620668Z","published_at":"2024-10-15T21:30:39Z","references":["https://osv.dev/vulnerability/GHSA-xhr3-wf7j-h255","https://nvd.nist.gov/vuln/detail/CVE-2024-44337","https://github.com/gomarkdown/markdown/commit/a2a9c4f76ef5a5c32108e36f7c47f8d310322252","https://github.com/Brinmon/CVE-2024-44337","https://github.com/gomarkdown/markdown","https://pkg.go.dev/vuln/GO-2024-3205"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-xhr3-wf7j-h255","url":"https://osv.dev/vulnerability/GHSA-xhr3-wf7j-h255"}],"summary":"Infinite loop in github.com/gomarkdown/markdown"}