CVE-2023-39663

n/a / n/a PUBLISHED

Description (CNA)

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/mathjax/MathJax/issues/3074

ADP enrichment

CVE

No English description supplied.

https://github.com/mathjax/MathJax/issues/3074

CISA-ADP

No English description supplied.

No references supplied.