Luatex Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Luatex Project records in CISA KEV

No Luatex Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-15976 CVE-2023-32700 · GHSA-7xcp-5fvh-7fwm

HIGH 73

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00811 Published 2023-05-20 Partial fix CWE-77

TI-2023-15944 CVE-2023-32668 · GHSA-hm67-jh95-48xh

LOW 25

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0037 Published 2023-05-11 No fix listed