Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/KaTeX/KaTeX

Fast math typesetting for the web.
https://github.com/KaTeX/KaTeX

Moderate

GSA_kwCzR0hTQS0zd2M1LWZjdzItMjMyOc4AA6Rb

KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols
Ecosystems: npm
Packages: katex
Source: github
Published: 9 months ago

Moderate

GSA_kwCzR0hTQS1mOTh3LTdjeHItZmYyaM4AA6Ra

KaTeX's `\includegraphics` does not escape filename
Ecosystems: npm
Packages: katex
Source: github
Published: 9 months ago

Moderate

GSA_kwCzR0hTQS1jdnI2LTM3Z3gtdjh3Y84AA6RZ

KaTeX's maxExpand bypassed by Unicode sub/superscripts
Ecosystems: npm
Packages: katex
Source: github
Published: 9 months ago

Moderate

GSA_kwCzR0hTQS02NGZtLThodzItdjcyd84AA6RY

KaTeX's maxExpand bypassed by `\edef`
Ecosystems: npm
Packages: katex
Source: github
Published: 9 months ago