Security Advisory
CVE-2024-28245
6.3
MEDIUM
Vulnerability Description
KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\includegraphics` that runs arbitrary JavaScript, or generate invalid HTML. Upgrade to KaTeX v0.16.10 to remove this vulnerability.
Published Date
March 25, 2024
Official Source
NIST NVD Advisory