CVE-2026-56765: Double Escape Before Markdown

Applying HTML escaping before Markdown conversion (e.g., via goldmark) leads to double-escaped entities in the final output. This generally produces a functional presentation layer bug rather than a true security boundary flaw.

Provally CuratedPublic repositoryLowMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-56765-double-escape-before-markdown --engine opengrep

Description

Applying HTML escaping before Markdown conversion (e.g., via goldmark) leads to double-escaped entities in the final output. This generally produces a functional presentation layer bug rather than a true security boundary flaw.