CVE-2026-102359

In Kroki versions prior to 0.31.2 , the TikZ backend fails to properly restrict file access when KROKI_SAFE_MODE is enabled. While the tikz/tikz2svg guard blocks \verbatiminput, it allows native TeX file-read primitives such as \openin, \read, \input, and \include. Due to TeX Live's permissive op...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

CVE-2024-40445_CVE-2024-40446

MimeTeX Vulnerability Reference CVE-2024-40445 & CVE-2024-40446 This repository serves as the public reference for the security issues CVE-2024-40445 and CVE-2024-40446 affecting MimeTeX, a lightweight open-source LaTeX renderer written in C. ⚠️ MimeTeX appears to be no longer actively maintained...

CVE-2026-107252

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting XSS. This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2...

CVE-2026-107252 MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting XSS. This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2...

EUVD-2026-113580

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting XSS. This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2...

CVE-2026-107252 MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting XSS. This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2...

CVE-2026-107252

The MathJax: LaTeX for Drupal module (versions 0.0.0 to 4.1.2 ) is vulnerable to Cross-Site Scripting (XSS) due to library configurations that fail to escape JavaScript within the TeX it formats. This vulnerability allows for the execution of malicious scripts in the user's browser. Remediation i...

CVE-2026-107252 MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting XSS. This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2...

CVE-2026-107252: Drupal MathJax: LaTeX for Drupal: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax:…

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting XSS. This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2...

Drupal MathJax: Cross-site scripting vulnerability in LaTeX for Drupal

Drupal MathJax: In Drupal versions 0.0.0 through 4.1.2, there is a cross-site scripting vulnerability in LaTeX. This vulnerability stems from improper input handling during web page generation and may lead to cross-site scripting attacks...

nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc

Summary nbconvert = v7.17.1 has an arbitrary file write vulnerability due to a path traversal in ipynb cell output metadata, more specifically on the filename attribute. Vulnerable converters : --to markdown, --to latex, --to rst, --to asciidoc. In ExtractOutputPreprocessor,...

GHSA-PJVX-PRJX-H659 nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc

Summary nbconvert = v7.17.1 has an arbitrary file write vulnerability due to a path traversal in ipynb cell output metadata, more specifically on the filename attribute. Vulnerable converters : --to markdown, --to latex, --to rst, --to asciidoc. In ExtractOutputPreprocessor,...

CVE-2026-114140 nbconvert: File write via path traversal in cell output filenames

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to outputfilesdir without...

CVE-2026-114140 nbconvert: File write via path traversal in cell output filenames

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to outputfilesdir without...

CVE-2026-114140

The nbconvert tool (jupyter nbconvert) versions 5.4.0 through 7.17.2 contains a path traversal vulnerability in the ExtractOutputPreprocessor component located at nbconvert/preprocessors/extractoutput.py. The flaw exists because the tool joins attacker-controlled cell output metadata filenames wi...

CVE-2026-114140 nbconvert: File write via path traversal in cell output filenames

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to outputfilesdir without...

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

SummaryWhen the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can rea...

PYSEC-2026-4216 Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...

GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...