Skip to content
OpenAdvisories

Package · crates.io

ratex-parser

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)

    RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\left`, `\sqrt{`, `^{`, etc, with no maximum depth limit. A short…