Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

KaTeX

Fast typesetting for the web
Collective - Host: opensource - https://opencollective.com/katex - Website: https://katex.org - Code: https://github.com/KaTeX

Moderate

KaTeX: GSA_kwCzR0hTQS0zd2M1LWZjdzItMjMyOc4AA6Rb

KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols
Ecosystems: npm
Packages: katex
Source: github
Published: 7 months ago

Moderate

KaTeX: GSA_kwCzR0hTQS1mOTh3LTdjeHItZmYyaM4AA6Ra

KaTeX's `\includegraphics` does not escape filename
Ecosystems: npm
Packages: katex
Source: github
Published: 7 months ago

Moderate

KaTeX: GSA_kwCzR0hTQS1jdnI2LTM3Z3gtdjh3Y84AA6RZ

KaTeX's maxExpand bypassed by Unicode sub/superscripts
Ecosystems: npm
Packages: katex
Source: github
Published: 7 months ago

Moderate

KaTeX: GSA_kwCzR0hTQS02NGZtLThodzItdjcyd84AA6RY

KaTeX's maxExpand bypassed by `\edef`
Ecosystems: npm
Packages: katex
Source: github
Published: 7 months ago