—

GO-2026-4765

mo has a XSS via inline SVG script tags in Markdown rendering in github.com/k1LoW/mo

Quick fix

GO-2026-4765 — github.com/k1LoW/mo: upgrade to the fixed version with the command below.

go get github.com/k1LoW/mo@v0.18.5

Details

mo has a XSS via inline SVG script tags in Markdown rendering in github.com/k1LoW/mo

Enter the version of the package you're using.

Introduced in: 0Fixed in: 0.18.5

Fixgo get github.com/k1LoW/mo@v0.18.5