Linux Distros Unpatched Vulnerability : CVE-2024-28244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using...

CVE-2024-28244

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \def or \newcommand that causes a near-infinite loop, despite setting maxExpand to avoid such loops. KaTeX supports an option named...

CVE-2024-28244 KaTeX's maxExpand bypassed by Unicode sub/superscripts

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \def or \newcommand that causes a near-infinite loop, despite setting maxExpand to avoid such loops. KaTeX supports an option named...

@autoanki/plugin-content-markdown (>=0.0.3, <=0.1.9), @awesome-myst/myst-awesome (>=0.0.1, <=0.0.7) +341 more potentially affected by CVE-2024-28244 via katex (>=0.15.4, <=0.16.9)

katex NPM version =0.15.4, =0.0.3, =0.0.1, =1.0.12, =1.0.1, =1.2.0, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.1.0, =0.1.0, =1.12.1, =1.1.1-alpha.0, =1.12.0, =1.65.0 and more Source cves: CVE-2024-28244 Source advisory: OSV:GHSA-CVR6-37GX-V8WC...