145 matches found
EUVD-2019-8950
Malware in sbrugna...
EUVD-2018-0212
Malware in sbrugna...
EUVD-2020-10665
Malware in sbrugna...
EUVD-2024-52090
Malicious code in bioql PyPI...
EUVD-2024-34471
Malicious code in bioql PyPI...
EUVD-2024-39062
Malicious code in bioql PyPI...
@datalayer/jupyter-react (>=0.4.0, <=0.9.5) potentially affected by CVE-2025-59842 via @jupyterlab/mathjax-extension (>=4.0.0, <=4.1.0-beta.0)
@jupyterlab/mathjax-extension NPM version =4.0.0, =0.4.0, =0.9.5 Source cves: CVE-2025-59842 Source advisory: MEND:CVE-2025-59842...
MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability
...
Linux Distros Unpatched Vulnerability : CVE-2018-1999024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascri...
Linux Distros Unpatched Vulnerability : CVE-2023-39663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service ReDoS vulnerabilities in MathJax.js via the components pattern and...
Linux Distros Unpatched Vulnerability : CVE-2024-43805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on us...
Moodle 5.x < 5.0.1 Reflected Cross-Site Scripting
According to its self-reported version, the Moodle install hosted on the remote host is 5.x prior to 5.0.1 . It is, therefore, affected by a Reflected XSS in MathJax. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version numbe...
CVE-2024-41482
Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the MathJax component...
CVE-2024-32945
Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...
CVE-2024-53758
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP MathJax wp-mathjax-plus allows Stored XSS.This issue affects WP MathJax: from n/a through = 1.0.1...
CVE-2023-39663
Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service ReDoS vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk...
CVE-2020-18748
Cross Site Scripting XSS in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221...
CVE-2019-19329
In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no...
MAL-2025-2688 Malicious code in mathjax-v3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31e9bef117fdc744a0166905e2fe2aba840a07ffa7b09a4320b90476efc7aa46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mathjax-v3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31e9bef117fdc744a0166905e2fe2aba840a07ffa7b09a4320b90476efc7aa46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...