| Package | Affected versions | Patched versions |
|---|---|---|
| mathjax | ≤ 2.7.9 | |
| mathjax | ≤ 2.7.9 |
Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free