-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaScriptJavaScript| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| katex | npm | >= 0.10.0-beta, < 0.16.10 | 0.16.10 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from how macro expansions were counted. The pre-patch code in expandOnce() only incremented expansionCount by 1 per macro expansion, while expandTokens() (used by \edef) didn't account for multiple tokens generated. This allowed attackers to create exponential token growth through linear \edef expansions. The fix introduced countExpansion() to track token quantities, confirming these functions were the vulnerable points.
Ongoing coverage of React2Shell