ironlab-text (>=0.5.2, <=0.10.4) potentially affected by unknown CVE via latex-rust (1.0.2)

latex-rust CARGO version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on latex-rust and may be impacted: - ironlab-text =0.5.2, =0.10.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0311...

RUSTSEC-2026-0311 Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

PT-2026-107651

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as frac1…, braces, sqrt…, left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...