Katex vulnerabilities
Products
- Katex 6
Newest
- katex KaTeX: Existing prototype pollution can bypass trust restrictions 2.1 Low
- katex \htmlData does not validate attribute names in KaTeX 6.3 Medium
- katex KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols 5.5 Medium
- katex KaTeX's \includegraphics does not escape filename 6.3 Medium
- katex KaTeX's maxExpand bypassed by Unicode sub/superscripts 6.5 Medium
- katex KaTeX's maxExpand bypassed by \edef 6.5 Medium