CVE-2023-39663

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p55

Published

Aug 29, 2023 (Aug 29, 2023)

Modified

Jun 17, 2026

Description

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.

Vendors: mathjax
Products: mathjax
Weakness: CWE-1333
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.