CVE-2026-40890 — Out-of-bounds Read in Gomarkdown Markdown

Go Markdown has an Out-of-bounds Read in SmartypantsRenderer ### Summary Processing a malformed input containing a `` character anywhere in the remaining text with a SmartypantsRenderer will lead to Out of Bounds read or a panic. ### Details The `smartLeftAngle()` function in `html/smartypants.go:367-376` performs an out-of-bounds slice operation when processing a `` character anywhere in the remaining text. https://github.com/gomarkdown/markdown/blob/37c66b85d6ab025ba67a73ba03b7f3ef55859cca…