{"action":"Upgrade katex to 0.16.10 or later.","affected":[{"fixed":"0.16.10","introduced":"0.12.0"}],"component":"katex","cve_ids":["CVE-2024-28243"],"ecosystem":"npm","epss":0.01414,"exploited":false,"fixed_versions":["0.16.10"],"ghsa_id":"GHSA-64fm-8hw2-v72w","id":"tcs_01M5KF5JTNCE5ACETJ9W6DF3H2","modified_at":"2026-02-05T16:04:19.949868Z","published_at":"2024-03-25T19:38:18Z","references":["https://osv.dev/vulnerability/GHSA-64fm-8hw2-v72w","https://github.com/KaTeX/KaTeX/security/advisories/GHSA-64fm-8hw2-v72w","https://nvd.nist.gov/vuln/detail/CVE-2024-28243","https://github.com/github/advisory-database/pull/6777","https://github.com/KaTeX/KaTeX/commit/e88b4c357f978b1bca8edfe3297f0aa309bcbe34","https://github.com/KaTeX/KaTeX"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-64fm-8hw2-v72w","url":"https://osv.dev/vulnerability/GHSA-64fm-8hw2-v72w"}],"summary":"KaTeX's maxExpand bypassed by `\\edef`"}