MEDIUM6.1npm
GHSA-22g5-r2x5-97cx· CVE-2026-59710showdown allows stored cross-site scripting through table header ID injection
Modified: 9/10/2026
package
npm/showdown
pkg:npm/showdown
MEDIUM6.1npm
GHSA-cr32-g25g-vxjj· CVE-2026-59711showdown metadata title handling allows cross-site scripting
Modified: 9/10/2026
LOW3.1npm
GHSA-h6mq-3cj6-h738Reverse Tabnabbing in showdown
Modified: 10/1/2021
MEDIUM5.3npm
GHSA-rmmh-p597-ppvv· CVE-2024-1899Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
Modified: 9/10/2026