Is github.com/gomarkdown/markdown safe to use?

github.com/gomarkdown/markdown has 5 known vulnerabilities on the latest version (v0.0.0-20260417124207-7d523f7318df). DepScope rates its health at 58/100 (high risk).

What is the latest version of github.com/gomarkdown/markdown?

The latest version of github.com/gomarkdown/markdown is v0.0.0-20260417124207-7d523f7318df, released 2026-04-17.

Does github.com/gomarkdown/markdown have known vulnerabilities?

Yes. github.com/gomarkdown/markdown has 5 known vulnerabilities. See depscope.dev/pkg/go/github.com/gomarkdown/markdown for details.

Is github.com/gomarkdown/markdown deprecated?

No, github.com/gomarkdown/markdown is actively maintained. Latest release: v0.0.0-20260417124207-7d523f7318df (2026-04-17).

What are alternatives to github.com/gomarkdown/markdown?

DepScope has no curated alternatives for github.com/gomarkdown/markdown at this time.

What license does github.com/gomarkdown/markdown use?

github.com/gomarkdown/markdown is licensed under BSD-2-Clause.

github.com/gomarkdown/markdown

govv0.0.0-20260417124207-7d523f7318df

markdown parser and HTML renderer for Go

License BSD-2-Clausepermissive0 versions96 maintainers0 deps1,699 weekly dl

gomarkdown/markdown

/ 100

Health

update required

github.com/gomarkdown/[email protected] has vulnerabilities — update to latest

Update to >= 0.0.0-20240729212818-a2a9c4f76ef5 to fix known vulnerabilities

2 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

6/20

popularity

13/25

security

9/15

maturity

5/15

community

Vulnerabilities

2 high1 medium2 low

Advisories (5)

Severity	ID	Summary	Fixed in
high	CVE-2026-40890	Go Markdown has an Out-of-bounds Read in SmartypantsRenderer	0.0.0-20260411013819-759bbc3e3207
high	CVE-2023-42821	Markdown vulnerable to Out-of-bounds Read while parsing citations	0.0.0-20230922105210-14b16010c2ee
medium	CVE-2024-44337	Infinite loop in github.com/gomarkdown/markdown	0.0.0-20240729212818-a2a9c4f76ef5
unknown	CVE-2023-42821	Parser out-of-bounds read caused by a malformed markdown input in github.com/gomarkdown/markdown	0.0.0-20230922105210-14b16010c2ee
unknown	CVE-2024-44337	Infinite loop in github.com/gomarkdown/markdown	0.0.0-20240729212818-a2a9c4f76ef5

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/gomarkdown/markdown

Last updated · 2026-04-17T12:42:07Z