Showdownjs Showdown

• CVE-2026-104477 Medium 6.1 Showdown through 2.1.0 XSS via unescaped quote in href and src attributes 0.2%
• CVE-2024-1899 Medium 5.3 Showdownjs Denial of Service 0.8%