Skip to content
OpenAdvisories

Package · npm

mathlive

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2026-54705

    mathlive's Lack of Escaping of HTML allows for XSS

    MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text{} and \mbox{} commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-m…

    arnog mathlive mathlive npm
  • Medium 6.3
    CVE-2025-29049

    MathLive's Lack of Escaping of HTML allows for XSS

    Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.

    mathlive npm