Mathjax

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mathjax records in CISA KEV

No Mathjax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mathjax 2 records HIGH

Records

2 records in Mathjax · all components

TI-2023-20728 CVE-2023-39663 · GHSA-v638-q856-grg8

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service…

HIGH 72

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00819 Published 2023-08-29 No fix listed CWE-1333

TI-2018-16165 CVE-2018-1999024 · GHSA-3c48-6pcv-88rm

MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS)…

LOW 27

MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running within a web browser.

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.01448 Published 2018-07-23 Fixed in 2.7.4 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0