What’s Vulnerable › Vulnerabilities

CVE-2025-29049

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-01 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.

References

• https://github.com/advisories/GHSA-qwj6-q94f-8425
• https://github.com/arnog/mathlive/commit/abc26056fd5e29a99edfa96a0bbe855ea2a8b678
• https://github.com/advisories/GHSA-qwj6-q94f-8425

Get alerted when CVE-2025-29049 or the next vulnerability affects your stack