Skip to content
OpenAdvisories

Package · npm

markdown-it-katex

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-5ff8-jcf9-fw62

    Cross-Site Scripting in markdown-it-katex

    All versions of `markdown-it-katex` are vulnerable to Cross-Site Scripting (XSS). The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser by triggering an error. ## Recommendation No…

    markdown-it-katex npm