HIGH
gomarkdown
CVE published 2026-10-16
CVE-2026-102941
A vulnerability in the gomarkdown/markdown package allows for a panic when the IsSafeURL function is called with a short URL, potentially leading to a denial-of-service (DoS) attack. This issue arises from the function's improper handling of URLs shorter than the path prefix, which can cause a slice-bounds panic. The vulnerability is reachable end-to-end when the html.Safelink hardening flag is enabled an [truncated]