GHSA-CVR6-37GX-V8WC KaTeX's maxExpand bypassed by Unicode sub/superscripts

Impact KaTeX users who render untrusted mathematical expressions could encounter malicious input using \def or \newcommand that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where e.g. a client rendering another user's KaTe...