CyberSecBulletin

KaTeX vulnerabilities

We track 1 vulnerability in KaTeX products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 17, 2025.

1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score

Latest KaTeX vulnerabilities

  • 7.2 High severity

    KaTeX: Improper Neutralization of Input During Web Page Generation

    CVE-2025-23207KaTeX

    KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions with `renderToString` could encounter malicious input using `\htmlData` that runs arbitrary JavaScript, or generate inv