Ubuntu: Security Advisory (USN-7572-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28243

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

CVE-2024-28243

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1162 more potentially affected by CVE-2024-28243 via katex (>=0.12.0, <=0.16.9)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2024-28243 Source advisory: OSV:GHSA-64FM-8HW2-V72W...