node-katex vulnerabilities (Debian)
6 vulnerabilities.
-
node-katexDebian KaTeX: Existing prototype pollution can bypass trust restrictions 2.1 Low -
node-katexDebian \htmlData does not validate attribute names in KaTeX 6.3 Medium -
node-katexDebian KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols 5.5 Medium -
node-katexDebian KaTeX's \includegraphics does not escape filename 6.3 Medium -
node-katexDebian KaTeX's maxExpand bypassed by Unicode sub/superscripts 6.5 Medium -
node-katexDebian KaTeX's maxExpand bypassed by \edef 6.5 Medium