VULNERABILITY INTELLIGENCE

CVE-2024-28245

CVSS score6.3 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2024-03-25

Last modified2026-06-17

Description

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\includegraphics` that runs arbitrary JavaScript, or generate invalid HTML. Upgrade to KaTeX v0.16.10 to remove this vulnerability.