Description
domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/documize/community | < 3.5.1 | 3.5.1 | GHSA-wmwp-pggc-h4mj |
| Go | github.com/documize/community | < 1.76.3-0.20191119114751-a4384210d4d0 | 1.76.3-0.20191119114751-a4384210d4d0 | GO-2021-0086 |