KA
Vendor
KaTeX
6
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103923 | KA KaTeX KaTeX | 2.1 | Oct 1 | KaTeX: Existing prototype pollution can bypass trust restrictions |
| CVE-2025-23207 | KA KaTeX KaTeX | 7.2 | Jan 17 | \htmlData does not validate attribute names in KaTeX |
| CVE-2024-28246 | KA KaTeX KaTeX | 5.4 | Mar 25 | KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols |
| CVE-2024-28245 | KA KaTeX KaTeX | 6.1 | Mar 25 | KaTeX's \includegraphics does not escape filename |
| CVE-2024-28244 | KA KaTeX KaTeX | 6.5 | Mar 25 | KaTeX's maxExpand bypassed by Unicode sub/superscripts |
| CVE-2024-28243 | KA KaTeX KaTeX | 6.5 | Mar 25 | KaTeX's maxExpand bypassed by \edef |