What’s Vulnerable › Products
showdownjs showdown vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your showdownjs showdown version is affected
Latest showdownjs showdown vulnerabilities
- CVE-2026-104477 — Showdown through 2.1.0 XSS via unescaped quote in href and src attributes (CVSS 6.1)
- CVE-2024-1899 — Showdownjs Denial of Service (CVSS 5.3)