CVE-2025-29049: vulnerability facts

CVE-2025-29049

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.

CVSS 6.3 · Medium · EPSS 0.6% · Fix available

Published: 2025-04-01T00:00:00.000Z
Updated: 2025-04-01T20:49:01.248Z

Stack: node

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
mathlive npm
Affected ranges
- SEMVER: < 0.104.0
Update to 0.104.0

Original sources

https://github.com/advisories/GHSA-qwj6-q94f-8425
https://github.com/arnog/mathlive/commit/abc26056fd5e29a99edfa96a0bbe855ea2a8b678
https://nvd.nist.gov/vuln/detail/CVE-2025-29049

Check your server →

CVE-2025-29049

Affected products and versions

n/a

mathlive npm

Original sources