Luatex Project vulnerabilities
We track 1 vulnerability in Luatex Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 20, 2023.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Luatex Project vulnerabilities
- 7.8 High severity
Luatex: Improper Neutralization of Special Elements used in a Command
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX