showdown
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| showdown metadata title handling allows cross-site scripting | showdownMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 | npmRed Hat | Medium | No fix reported | |
| showdown allows stored cross-site scripting through table header ID injection | showdownCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | No fix reported | |
| Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing | showdown | npm | Medium | No fix reported | |
| Reverse Tabnabbing in showdown | showdown | npm | Low | Fix reported |