id: GO-2023-2074
modules:
    - module: github.com/gomarkdown/markdown
      versions:
        - fixed: 0.0.0-20230922105210-14b16010c2ee
      vulnerable_at: 0.0.0-20230916125811-7478c230c7cd
      packages:
        - package: github.com/gomarkdown/markdown/parser
          symbols:
            - Parser.isPrefixHeading
            - citation
          derived_symbols:
            - Parser.Block
            - Parser.Inline
            - Parser.Parse
summary: Parser out-of-bounds read vulnerability caused by a malformed markdown input
cves:
    - CVE-2023-42821
ghsas:
    - GHSA-m9xq-6h2j-65r2
references:
    - advisory: https://github.com/gomarkdown/markdown/security/advisories/GHSA-m9xq-6h2j-65r2
    - fix: https://github.com/gomarkdown/markdown/commit/14b16010c2ee7ff33a940a541d993bd043a88940