CVE-2026-77088: Unescaped Newline Markdown Code Span

Inline Markdown code span generation does not normalize newlines or carriage returns. Blank lines inside inline code spans can break out of the inline span and paragraph block, leading to raw HTML/Markdown injection.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-77088-unescaped-newline-markdown-code-span --engine opengrep

Description

Inline Markdown code span generation does not normalize newlines or carriage returns. Blank lines inside inline code spans can break out of the inline span and paragraph block, leading to raw HTML/Markdown injection.