gomarkdown

About this tag
The gomarkdown tag on WindowsForum.com covers discussions about the Go markdown parsing library, specifically the github.com/gomarkdown/markdown package. Content includes security vulnerabilities such as CVE-2023-42821, a denial-of-service issue caused by an out-of-bounds read when the parser.Mmark extension is enabled. This affects applications that render untrusted input, including web services, static-site generators, and internal tools. The tag is relevant for developers and IT professionals managing Go-based software supply chains, particularly those needing to apply patches or mitigations for this library.

  1. CVE-2023-42821: Patch Go gomarkdown DoS from Mmark bounds

    A subtle bug in a popular Go markdown library quietly turned into a disruptive denial-of-service vector: a malformed citation in certain parser modes can trigger an out‑of‑bounds read and crash any application that renders untrusted input with the affected code path. This vulnerability, tracked...