Vendor
PeteBishwhip
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.4
Laradocs: Command injection via unescaped Node.js binary path in KaTeX SSR
Laradocs maintains version-controlled documentation inside a Laravel codebase. From version 0.4.0 to before version 1.0.0, Laradocs is vulnerable to local command injection in server-side KaTeX rendering via an unescaped Node.js binary path in a proc_open() c…