← Back

Mathjax

mathjax

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mathjax
mathjax
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-39663
1Mathjax
1Mathjax
Jun 17, 2026
Aug 29, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the reg...Show more
Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.Show less
CVE-2018-1999024
1Mathjax
1Mathjax
Nov 21, 2024
Jul 23, 2018
N/A· v4
5.4 MEDIUM· v3
4.3 MEDIUM· v2
MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to b...Show more
MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processed using Mathjax. This vulnerability appears to have been fixed in 2.7.4 and later.Show less