Github Security Lab Vulnerability Report

Open Kwstubbs opened this issue 1 year ago • 1 comments

Greetings MathJax maintainers,

Github has found a potentail vulnerability in MathJax. Please let us know of a point of contact so that we can discuss this privately. We have the Private Vulnerability Reporting feature if you do not have an established point of contact.

Thanks, Kevin

Jun 27 '24 20:06 Kwstubbs

I have enabled the private vulnerability reporting as you have suggested. Please report your issue there.

If it is the issue from #3241 (which is a duplicate of #3129), then we are aware of it, and have patched it in v4.0 (now out in beta). There is a workaround listed in #3129 for v3.

Jun 28 '24 13:06 dpvc