katex
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| KaTeX: Existing prototype pollution can bypass trust restrictions | katexRed Hat Build of Podman Desktop/rh-podman-desktop | npmRed Hat | Low | Fix reported | |
| KaTeX's `\includegraphics` does not escape filename | katex | npm | Medium | Fix reported | |
| KaTeX's maxExpand bypassed by Unicode sub/superscripts | katex | npm | Medium | Fix reported | |
| KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols | katex | npm | Medium | Fix reported | |
| KaTeX's maxExpand bypassed by `\edef` | katex | npm | Medium | Fix reported | |
| KaTeX \htmlData does not validate attribute names | katex | npm | Medium | Fix reported |