katex vulnerabilities (npm)
6 vulnerabilities.
-
katexnpm KaTeX: Existing prototype pollution can bypass trust restrictions 2.1 Low -
katexnpm \htmlData does not validate attribute names in KaTeX 6.3 Medium -
katexnpm KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols 5.5 Medium -
katexnpm KaTeX's \includegraphics does not escape filename 6.3 Medium -
katexnpm KaTeX's maxExpand bypassed by Unicode sub/superscripts 6.5 Medium -
katexnpm KaTeX's maxExpand bypassed by \edef 6.5 Medium