node-katex vulnerabilities (Ubuntu)

5 vulnerabilities.

• node-katex Ubuntu KaTeX: Existing prototype pollution can bypass trust restrictions CVE-2026-103923 Fix available 2.1 LowOctober 1, 2026
• node-katex Ubuntu \htmlData does not validate attribute names in KaTeX CVE-2025-23207 Fix available 6.3 MediumJanuary 17, 2025
• node-katex Ubuntu KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols CVE-2024-28246 Fix available 5.5 MediumMarch 25, 2024
• node-katex Ubuntu KaTeX's \includegraphics does not escape filename CVE-2024-28245 Fix available 6.3 MediumMarch 25, 2024
• node-katex Ubuntu KaTeX's maxExpand bypassed by \edef CVE-2024-28243 Fix available 6.5 MediumMarch 25, 2024