erweixin vulnerabilities

Products

• RaTeX 2

Latest erweixin CVEs

Newest publication first

1. CVE-2026-53531 ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)

   Published 2026-08-21

   Medium·CVSS 6.9 EPSS 0.43%

   RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at {, \left, \sqrt{, ^{, etc, with no maximum depth limit. A short, ~10 KB input of nested grou...

2. CVE-2026-53530 ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

   Published 2026-08-21

   High·CVSS 8.7 EPSS 0.43%

   RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint ratex_parser::parse(&str) panics on the 9-byte input \verbéxé (i.e. \verb followed by the non-ASCII delimiter é). When handling a \verb command, the parser sli...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.