CVE-2023-39663

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and…

published August 29, 2023

CVSS
—
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00819 · 56.8th percentile
Published
2023-08-29T00:00Z
EPSS history
Timeline
  • 29 AUG 00:00Z
    Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and…
    cvelistv5