VDB
KO

GO-2026-5208

Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown

Quick fix

GO-2026-5208 — github.com/gomarkdown/markdown: upgrade to the fixed version with the command below.

go get github.com/gomarkdown/markdown@v0.0.0-20260411013819-759bbc3e3207

Details

Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/gomarkdown/markdown
Introduced in: 0 Fixed in: 0.0.0-20260411013819-759bbc3e3207
Fix go get github.com/gomarkdown/markdown@v0.0.0-20260411013819-759bbc3e3207

References