Security fixes are addressed for the following versions of Showdown.
Version | Supported |
---|---|
2.0.x | ✅ |
1.x.x | ❌ (Known security issue with yargs dependecy) |
Showdown targets the node.js versions targeted in the node.js release schedule. Our test suite follows this release schedule. Consequently, older versions of node may become unusable.
To report a vulnerability, please add an issue to our main github page: https://github.com/showdownjs/showdown/issues