github.com/yuin/goldmark

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2026-5160

goldmark vulnerable to Cross-site Scripting (XSS)

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check (IsDang…

github.com/yuin/goldmark golang-github-yuin-goldmark golang-github-yuin-goldmark github.com/yuin/goldmark/renderer/html Debian Ubuntu Go

Apr 15, 2026