katex vulnerabilities (TuxCare)
5 vulnerabilities.
-
katexTuxCare KaTeX: Existing prototype pollution can bypass trust restrictions 2.1 Low -
katexTuxCare \htmlData does not validate attribute names in KaTeX 6.3 Medium -
katexTuxCare KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols 5.5 Medium -
katexTuxCare KaTeX's \includegraphics does not escape filename 6.3 Medium -
katexTuxCare KaTeX's maxExpand bypassed by \edef 6.5 Medium