GO-2026-5208
Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown
At a glance
- Published
- Updated
- CVE
- CVE-2026-40890
- Aliases
- GHSA-77fj-vx54-gvh7
Description
Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/gomarkdown/markdown | introduced 0, fixed 0.0.0-20260411013819-759bbc3e3207 |
References
- https://github.com/gomarkdown/markdown/security/advisories/GHSA-77fj-vx54-gvh7 ADVISORY
- https://github.com/gomarkdown/markdown/commit/759bbc3e32073c3bc4e25969c132fc520eda2778 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |