CVE-2026-65973

Versions 0.4.0 to before 1.0.0 of Laradocs are vulnerable to local command injection during server-side KaTeX rendering. The root cause is an unescaped Node.js binary path used within a proc_open() command string. Exploitation of this vulnerability could allow an attacker to execute arbitrary com...