Skip to content
OpenAdvisories

Package · crates.io

ratex-parser

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2026-53531

    ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)

    RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\left`, `\sqrt{`, `^{`, etc, with no maximum depth limit. A short…

    erweixin RaTeX ratex-parser crates.io
  • High 8.7
    CVE-2026-53530

    ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

    RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint `ratex_parser::parse(&str)` panics on the 9-byte input `\verbéxé` (i.e. `\verb` followed by the non-ASCII delimiter `é`). When handling a …

    erweixin RaTeX ratex-parser crates.io