Skip to content
OpenAdvisories

Vendor

PeteBishwhip

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.4

    Laradocs: Command injection via unescaped Node.js binary path in KaTeX SSR

    Laradocs maintains version-controlled documentation inside a Laravel codebase. From version 0.4.0 to before version 1.0.0, Laradocs is vulnerable to local command injection in server-side KaTeX rendering via an unescaped Node.js binary path in a proc_open() c…