Vulnerabilities
Last updated 3 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
KaTeX: Existing prototype pollution can bypass trust restrictions | Low Risk 3.0 | 8 hours ago | 8 hours ago |
|
|
KaTeX's maxExpand bypassed by Unicode sub/superscripts | Medium Risk 6.5 | 2 years ago | 26 days ago |
|
|
KaTeX's `\includegraphics` does not escape filename | Medium Risk 6.3 | 2 years ago | 26 days ago |
|
|
KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols | Medium Risk 5.5 | 2 years ago | 26 days ago |
|
|
KaTeX's maxExpand bypassed by `\edef` | Medium Risk 6.5 | 2 years ago | 8 months ago |
|
|
KaTeX \htmlData does not validate attribute names | Medium Risk 6.3 | 1 year ago | 1 year ago |
|
|
Cross-Site Scripting in markdown-it-katex | High Risk 8.0 | 6 years ago | 5 years ago |
Page 1