CVE-2026-103923
1 advisory.
npm/katex CVE-2026-103923: low, EPSS 0.30%
KaTeX: Existing prototype pollution can bypass trust restrictions
Action: Upgrade katex to 0.18.2 or later.
npm i katex@0.18.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.18.2 | - |
Fixed versions
| 0.18.2 |
Sources
- osv: GHSA-238p-pmpm-9mq7
- https://github.com/KaTeX/KaTeX/security/advisories/GHSA-238p-pmpm-9mq7
- https://nvd.nist.gov/vuln/detail/CVE-2026-103923
- https://github.com/KaTeX/KaTeX/pull/4260
- https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4
- https://github.com/KaTeX/KaTeX
- https://github.com/KaTeX/KaTeX/releases/tag/v0.18.2
CVE-2026-103923 · published · modified · JSON