CVE-2026-54705 | arnog MathLive up to 0.109.x Text Mode Escaping atom-to-math-ml.ts cross site scripting

July 29, 2026 Yanac

A vulnerability labeled as problematic has been found in arnog MathLive up to 0.109.x. The impacted element is the function Box.toMarkup/xmlEscape/scanText/convertLatexToMarkup/convertLatexToMathMl/MathfieldElement.createHTML of the file src/core/box.ts/src/formats/atom-to-math-ml.ts of the component Text Mode Escaping. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-54705. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More