[ Vendor · 1 CVEs ]
showdownjs
CVEs affecting showdownjs published in the last 30 days, plus any showdownjs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104477 | 3 Oct 2026 | CVSS 6.1 | showdownjs showdownShowdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in… |