domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19619.json"