Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

katex

npm

Fast math typesetting for the web.

View on github.com · View on npmjs.org

Security Advisories for katex in npm

Moderate
11 months ago

KaTeX \htmlData does not validate attribute names GSA_kwCzR0hTQS1jZzg3LXdteDQtdjU0Ns4ABDg9

npm katex
Moderate
over 1 year ago

KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols GSA_kwCzR0hTQS0zd2M1LWZjdzItMjMyOc4AA6Rb

npm katex
Moderate
over 1 year ago

KaTeX's `\includegraphics` does not escape filename GSA_kwCzR0hTQS1mOTh3LTdjeHItZmYyaM4AA6Ra

npm katex
Moderate
over 1 year ago

KaTeX's maxExpand bypassed by Unicode sub/superscripts GSA_kwCzR0hTQS1jdnI2LTM3Z3gtdjh3Y84AA6RZ

npm katex
Moderate
over 1 year ago

KaTeX's maxExpand bypassed by `\edef` GSA_kwCzR0hTQS02NGZtLThodzItdjcyd84AA6RY

npm katex

Filter by Severity

Moderate 5