Skip to content
OpenAdvisories

Package · Debian

golang-github-yuin-goldmark

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2026-5160

    goldmark vulnerable to Cross-site Scripting (XSS)

    Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check (IsDang…

    nuclei telegraf osv-scanner dagger Debian Ubuntu Azure Linux Wolfi Go