Get real-time updates on Telegram

KaTeX: Existing prototype pollution can bypass trust restrictions

CVE-2026-103923 affects katex. EPSS 0.00304 (percentile 0.21037), scored 2026-10-04. Affected range: >= 0.11.0, < 0.18.2. Fixed version: 0.18.2.

Published 2026-10-06 00:14:27.325670+00:00

CVE

CVE-2026-103923

Product

katex

CCR priority

0.1 /100 (P5)

EPSS

0.00304 · percentile 0.21037 · 2026-10-04

KEV

no

Affected products

• katex · >= 0.11.0, < 0.18.2 · Fixed version: 0.18.2

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-103923.html