gomarkdown

A subtle bug in a popular Go markdown library quietly turned into a disruptive denial-of-service vector: a malformed citation in certain parser modes can trigger an out‑of‑bounds read and crash any application that renders untrusted input with the affected code path. This vulnerability, tracked...