Skip to content

Security: showdownjs/showdown

Security

SECURITY.md

Security Policy

Supported Versions

Security fixes are addressed for the following versions of Showdown.

Version Supported
2.0.x
1.x.x ❌ (Known security issue with yargs dependecy)

Showdown targets the node.js versions targeted in the node.js release schedule. Our test suite follows this release schedule. Consequently, older versions of node may become unusable.

Reporting a Vulnerability

To report a vulnerability, please add an issue to our main github page: https://github.com/showdownjs/showdown/issues

There aren’t any published security advisories