CVE-2026-104477 | showdownjs Showdown up to 2.1.0 Makehtml Link/Image Subparsers HTML injection

October 3, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in showdownjs Showdown up to 2.1.0. Impacted is an unknown function of the component Makehtml Link/Image Subparsers. Performing a manipulation results in HTML injection.

This vulnerability was named CVE-2026-104477. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More