{"action":"Upgrade github.com/yuin/goldmark to 1.7.17 or later.","affected":[{"fixed":"1.7.17","introduced":"0"}],"component":"github.com/yuin/goldmark","cve_ids":["CVE-2026-5160"],"ecosystem":"Go","epss":0.00287,"exploited":false,"fixed_versions":["1.7.17"],"ghsa_id":"GHSA-c97m-vxhj-p7j6","id":"tcs_01M5KGKFKJM53A9R5GQ4YBX914","modified_at":"2026-07-22T20:59:36.886153285Z","published_at":"2026-07-07T16:52:19Z","references":["https://osv.dev/vulnerability/GO-2026-5320","https://github.com/advisories/GHSA-c97m-vxhj-p7j6","https://github.com/yuin/goldmark/commit/cb46bbc4eca29d55aa9721e04ad207c23ccc44f9","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMYUINGOLDMARKRENDERERHTML-15838406"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GO-2026-5320","url":"https://osv.dev/vulnerability/GO-2026-5320"},{"source":"nvd","source_id":"CVE-2026-5160","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5160"}],"summary":"Cross-site Scripting (XSS) in github.com/yuin/goldmark"}