Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/katex@0.11.1
Typenpm
Namespace
Namekatex
Version0.11.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.16.21
Latest_non_vulnerable_version0.16.21
Affected_by_vulnerabilities
0
url VCID-1uvx-5hp6-5bgk
vulnerability_id VCID-1uvx-5hp6-5bgk
summary KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\includegraphics` that runs arbitrary JavaScript, or generate invalid HTML. Upgrade to KaTeX v0.16.10 to remove this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-28245
reference_id
reference_type
scores
0
value 0.00049
scoring_system epss
scoring_elements 0.15642
published_at 2026-06-13T12:55:00Z
1
value 0.00049
scoring_system epss
scoring_elements 0.1563
published_at 2026-06-12T12:55:00Z
2
value 0.00049
scoring_system epss
scoring_elements 0.15493
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-28245
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28245
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28245
2
reference_url https://github.com/KaTeX/KaTeX
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/KaTeX/KaTeX
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067805
reference_id 1067805
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067805
4
reference_url https://github.com/KaTeX/KaTeX/commit/c5897fcd1f73da9612a53e6b5544f1d776e17770
reference_id c5897fcd1f73da9612a53e6b5544f1d776e17770
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-26T19:26:52Z/
url https://github.com/KaTeX/KaTeX/commit/c5897fcd1f73da9612a53e6b5544f1d776e17770
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-28245
reference_id CVE-2024-28245
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-28245
6
reference_url https://github.com/advisories/GHSA-f98w-7cxr-ff2h
reference_id GHSA-f98w-7cxr-ff2h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f98w-7cxr-ff2h
7
reference_url https://github.com/KaTeX/KaTeX/security/advisories/GHSA-f98w-7cxr-ff2h
reference_id GHSA-f98w-7cxr-ff2h
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-26T19:26:52Z/
url https://github.com/KaTeX/KaTeX/security/advisories/GHSA-f98w-7cxr-ff2h
8
reference_url https://usn.ubuntu.com/7572-1/
reference_id USN-7572-1
reference_type
scores
url https://usn.ubuntu.com/7572-1/
fixed_packages
0
url pkg:npm/katex@0.16.10
purl pkg:npm/katex@0.16.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-npmc-q6zw-j7de
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/katex@0.16.10
aliases CVE-2024-28245, GHSA-f98w-7cxr-ff2h
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1uvx-5hp6-5bgk
1
url VCID-j9km-s26z-ekc7
vulnerability_id VCID-j9km-s26z-ekc7
summary KaTeX is a JavaScript library for TeX math rendering on the web. Code that uses KaTeX's `trust` option, specifically that provides a function to blacklist certain URL protocols, can be fooled by URLs in malicious inputs that use uppercase characters in the protocol. In particular, this can allow for malicious input to generate `javascript:` links in the output, even if the `trust` function tries to forbid this protocol via `trust: (context) => context.protocol !== 'javascript'`. Upgrade to KaTeX v0.16.10 to remove this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-28246
reference_id
reference_type
scores
0
value 0.00056
scoring_system epss
scoring_elements 0.18142
published_at 2026-06-12T12:55:00Z
1
value 0.00056
scoring_system epss
scoring_elements 0.18159
published_at 2026-06-13T12:55:00Z
2
value 0.00056
scoring_system epss
scoring_elements 0.17984
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-28246
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28246
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28246
2
reference_url https://github.com/KaTeX/KaTeX
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/KaTeX/KaTeX
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067805
reference_id 1067805
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067805
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-28246
reference_id CVE-2024-28246
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-28246
5
reference_url https://github.com/KaTeX/KaTeX/commit/fc5af64183a3ceb9be9d1c23a275999a728593de
reference_id fc5af64183a3ceb9be9d1c23a275999a728593de
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T00:04:56Z/
url https://github.com/KaTeX/KaTeX/commit/fc5af64183a3ceb9be9d1c23a275999a728593de
6
reference_url https://github.com/advisories/GHSA-3wc5-fcw2-2329
reference_id GHSA-3wc5-fcw2-2329
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3wc5-fcw2-2329
7
reference_url https://github.com/KaTeX/KaTeX/security/advisories/GHSA-3wc5-fcw2-2329
reference_id GHSA-3wc5-fcw2-2329
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T00:04:56Z/
url https://github.com/KaTeX/KaTeX/security/advisories/GHSA-3wc5-fcw2-2329
8
reference_url https://usn.ubuntu.com/7572-1/
reference_id USN-7572-1
reference_type
scores
url https://usn.ubuntu.com/7572-1/
fixed_packages
0
url pkg:npm/katex@0.16.10
purl pkg:npm/katex@0.16.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-npmc-q6zw-j7de
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/katex@0.16.10
aliases CVE-2024-28246, GHSA-3wc5-fcw2-2329
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j9km-s26z-ekc7
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/katex@0.11.1