GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — fix: bump gomarkdown/markdown to fix GHSA-cv23-7vc5-jfh7 (backport 2.29) by coder[bot] · Pull Request #31455 · coder/coder

Conversation

@coder

@coder coder Bot commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

Backport of #31439 to release/2.29. Bumps github.com/gomarkdown/markdown from v0.0.0-20260417124207-7d523f7318df to v0.0.0-20260724235538-61af6e1e6971, the first version with the fix for GHSA-cv23-7vc5-jfh7 / CVE-2026-102941 (IsSafeURL panics on short URLs). Flagged by the IronBank VAT scan of 2.38.3.

go mod tidy changed no other modules. Verified: go test ./coderd/render/... and go test ./coderd/notifications/ -run Golden pass. Local git hooks were skipped; CI is the gate.

Part of ENT-229 (parent ENT-230). Backported to every supported release line per the backport policy in CONTRIBUTING.md.

Opened by Superblink on behalf of @droopy4096.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@coder
fix: bump gomarkdown/markdown to fix GHSA-cv23-7vc5-jfh7 (backport 2.29)
da3a0c0 
Bumps github.com/gomarkdown/markdown to v0.0.0-20260724235538-61af6e1e6971, the first version with the IsSafeURL short-URL panic fix (GHSA-cv23-7vc5-jfh7 / CVE-2026-102941). Flagged by the IronBank VAT scan of 2.38.3.

Refs ENT-229
@linear-code

linear-code Bot commented Oct 28, 2026

Copy link
Copy Markdown

ENT-229
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@github-actions github-actions Bot added the community Pull Requests and issues created by the community. label Oct 28, 2026
@coder coder Bot added cherry-pick/v2.29 Needs to be cherry-picked to the 2.29 release branch and removed community Pull Requests and issues created by the community. labels Oct 28, 2026
@coder coder Bot assigned droopy4096 Oct 28, 2026
@droopy4096
droopy4096 marked this pull request as ready for review October 29, 2026 13:54
@coder
coder Bot requested review from BobbyHo, Shelnutt2, denisra and jdomeracki-coder October 29, 2026 17:20
BobbyHo
BobbyHo approved these changes Oct 29, 2026
View reviewed changes
@denisra
denisra merged commit 810b0c5 into release/2.29 Nov 2, 2026
36 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@denisra
denisra deleted the superblink/ent-229-gomarkdown-ghsa-cv23-release-229 branch November 2, 2026 18:24
@github-actions github-actions Bot locked and limited conversation to collaborators Nov 2, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@BobbyHo BobbyHo BobbyHo approved these changes
@Shelnutt2 Shelnutt2 Awaiting requested review from Shelnutt2
@denisra denisra Awaiting requested review from denisra
@jdomeracki-coder jdomeracki-coder Awaiting requested review from jdomeracki-coder

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@droopy4096 droopy4096

Labels

cherry-pick/v2.29 Needs to be cherry-picked to the 2.29 release branch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@BobbyHo @droopy4096 @denisra
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.