KaTeX vulnerabilities
6 published CVEs name KaTeX among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103923
KaTeX: Existing prototype pollution can bypass trust restrictions
KaTeX · KaTeX
Low2.1 - CVE-2025-23207
\htmlData does not validate attribute names in KaTeX
KaTeX · KaTeX
Medium6.3 - CVE-2024-28246
KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols
KaTeX · KaTeX
Medium5.5 - CVE-2024-28245
KaTeX's \includegraphics does not escape filename
KaTeX · KaTeX
Medium6.3 - CVE-2024-28244
KaTeX's maxExpand bypassed by Unicode sub/superscripts
KaTeX · KaTeX
Medium6.5 - CVE-2024-28243
KaTeX's maxExpand bypassed by \edef
KaTeX · KaTeX
Medium6.5