showdown/SECURITY.md

Security Policy

Supported Versions

Security fixes are addressed for the following versions of Showdown.

Version	Supported
2.0.x	✅
1.x.x	❌ (Known security issue with yargs dependecy)

Showdown targets the node.js versions targeted in the node.js release schedule. Our test suite follows this release schedule. Consequently, older versions of node may become unusable.

Reporting a Vulnerability

To report a vulnerability, please add an issue to our main github page: https://github.com/showdownjs/showdown/issues