https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 03:26:33 +0000 https://vulnerability.circl.lu/sighting/9cce9991-f7c9-47ce-84a0-6b6f504beb1f/export {"uuid": "9cce9991-f7c9-47ce-84a0-6b6f504beb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-fm7p-gw32-828p", "type": "seen", "source": "https://gist.github.com/alon710/1cabeec5e425623518fb342992349eb6", "content": "# CVE-2026-54705: CVE-2026-54705: DOM-Based Cross-Site Scripting in MathLive LaTeX Rendering Engine\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54705\n\n## Summary\nCVE-2026-54705 is a critical DOM-based Cross-Site Scripting (XSS) vulnerability affecting the MathLive library prior to version 0.110.0. The flaw stems from a lack of proper character escaping in the rendering path for LaTeX text-mode commands such as \\text{} and \\mbox{}, enabling unauthenticated attackers to execute arbitrary JavaScript in the victim's browser.\n\n## TL;DR\nMathLive versions < 0.110.0 fail to escape text-mode commands (like \\text{} and \\mbox{}), enabling DOM-based Cross-Site Scripting (XSS) when rendering untrusted LaTeX.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-116\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.3\n- **Exploit Status**: PoC Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: DOM-based Cross-Site Scripting (XSS)\n\n## Affected Systems\n\n- mathlive NPM library\n- **mathlive**: < 0.110.0 (Fixed in: `0.110.0`)\n\n## Mitigation\n\n- Upgrade mathlive to version 0.110.0 or higher.\n- Integrate client-side sanitizers such as DOMPurify to intercept and clean MathLive generated outputs.\n- Enforce a strict Content Security Policy (CSP) blocking inline scripts and unauthorized resources.\n\n**Remediation Steps:**\n1. Verify current version of mathlive package using `npm list mathlive`.\n2. Update dependency in `package.json` to `0.110.0` or higher.\n3. Audit application code for any usages of `convertLatexToMarkup` or raw math-static components that bind directly to innerHTML sinks.\n4. Apply DOMPurify to existing elements as an secondary defensive layer.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/arnog/mathlive/security/advisories/GHSA-fm7p-gw32-828p)\n- [MathLive Issue #3028](https://github.com/arnog/mathlive/issues/3028)\n- [MathLive Fix Commit](https://github.com/arnog/mathlive/commit/5fe1c46153883f9ec0249a5c8c34e64aaae9cfb8)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54705) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T18:31:02.085589Z"} {"uuid": "9cce9991-f7c9-47ce-84a0-6b6f504beb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-fm7p-gw32-828p", "type": "seen", "source": "https://gist.github.com/alon710/1cabeec5e425623518fb342992349eb6", "content": "# CVE-2026-54705: CVE-2026-54705: DOM-Based Cross-Site Scripting in MathLive LaTeX Rendering Engine\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54705\n\n## Summary\nCVE-2026-54705 is a critical DOM-based Cross-Site Scripting (XSS) vulnerability affecting the MathLive library prior to version 0.110.0. The flaw stems from a lack of proper character escaping in the rendering path for LaTeX text-mode commands such as \\text{} and \\mbox{}, enabling unauthenticated attackers to execute arbitrary JavaScript in the victim's browser.\n\n## TL;DR\nMathLive versions < 0.110.0 fail to escape text-mode commands (like \\text{} and \\mbox{}), enabling DOM-based Cross-Site Scripting (XSS) when rendering untrusted LaTeX.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-116\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.3\n- **Exploit Status**: PoC Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: DOM-based Cross-Site Scripting (XSS)\n\n## Affected Systems\n\n- mathlive NPM library\n- **mathlive**: < 0.110.0 (Fixed in: `0.110.0`)\n\n## Mitigation\n\n- Upgrade mathlive to version 0.110.0 or higher.\n- Integrate client-side sanitizers such as DOMPurify to intercept and clean MathLive generated outputs.\n- Enforce a strict Content Security Policy (CSP) blocking inline scripts and unauthorized resources.\n\n**Remediation Steps:**\n1. Verify current version of mathlive package using `npm list mathlive`.\n2. Update dependency in `package.json` to `0.110.0` or higher.\n3. Audit application code for any usages of `convertLatexToMarkup` or raw math-static components that bind directly to innerHTML sinks.\n4. Apply DOMPurify to existing elements as an secondary defensive layer.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/arnog/mathlive/security/advisories/GHSA-fm7p-gw32-828p)\n- [MathLive Issue #3028](https://github.com/arnog/mathlive/issues/3028)\n- [MathLive Fix Commit](https://github.com/arnog/mathlive/commit/5fe1c46153883f9ec0249a5c8c34e64aaae9cfb8)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54705) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T18:31:02.085589Z"} https://vulnerability.circl.lu/sighting/9cce9991-f7c9-47ce-84a0-6b6f504beb1f/export Wed, 29 Jul 2026 18:31:02 +0000