Vulnerabilities

TI-2025-16992 CVE-2025-23207 · GHSA-cg87-wmx4-v546

\htmlData does not validate attribute names in KaTeX

LOW 32

KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00406 Published 2025-01-17 Fixed in 0.16.21 CWE-116

TI-2024-18805 CVE-2024-28246 · GHSA-3wc5-fcw2-2329

LOW 25

KaTeX is a JavaScript library for TeX math rendering on the web.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00406 Published 2024-03-25 Fixed in 0.16.10 CWE-184

TI-2024-18804 CVE-2024-28245 · GHSA-f98w-7cxr-ff2h

LOW 30

KaTeX is a JavaScript library for TeX math rendering on the web.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00406 Published 2024-03-25 Fixed in 0.6.10, 0.16.10 CWE-116

TI-2024-18803 CVE-2024-28244 · GHSA-cvr6-37gx-v8wc

LOW 33

KaTeX is a JavaScript library for TeX math rendering on the web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02155 Published 2024-03-25 Fixed in 0.16.10 CWE-674

TI-2024-18802 CVE-2024-28243 · GHSA-64fm-8hw2-v72w

LOW 32

KaTeX is a JavaScript library for TeX math rendering on the web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01414 Published 2024-03-25 Fixed in 0.16.10 CWE-674