Beveiligingsadvies

CVE-2024-28245

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-25 19:53:01

Laatst bijgewerkt 2024-08-02 00:48:49

Toegewezen door GitHub_M

CVSS-score 6.3

Status PUBLISHED

Beschrijving

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\includegraphics` that runs arbitrary JavaScript, or generate invalid HTML. Upgrade to KaTeX v0.16.10 to remove this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗