CVE-2018-1999024 affecting package numpy for versions less than 1.26.3-4

CVE-2018-1999024 affecting package numpy for versions less than 1.26.3-4. A patched version of the package is available...

CVE-2018-1999024

CVE-2018-1999024 is a MathJax XSS vulnerability in the Unicode macro present in versions prior to 2.7.4. The issue allows potentially untrusted JavaScript to execute in a browser when a page processes untrusted content with MathJax. The vulnerability can be triggered by a victim viewing such cont...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...