Showdownjs

Products

ProductCVEsExploitedLatest
Showdown2–Oct 2, 2026

Exploited and recent CVEs

  • CVE-2026-104477 Medium 6.1 Showdown through 2.1.0 XSS via unescaped quote in href and src attributes 0.2%
  • CVE-2024-1899 Medium 5.3 Showdownjs Denial of Service 0.8%