Skip to content
OpenAdvisories

Package · npm

mathjax

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-39663

    MathJax Regular expression Denial of Service (ReDoS)

    Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to use…

    mathjax mathjax Ubuntu npm
  • Medium 5.4
    CVE-2018-1999024

    Macro in MathJax running untrusted Javascript within a web browser

    MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view …

    mathjax mathjax mathjax Debian Ubuntu npm