GHSA-23p7-42x4-gv9j

Facts

Severity

High

Affected versions (@wiris/mathtype-html-integration-devkit)

<= 1.17.15As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-html-integration-devkit)

1.17.16

Affected versions (@wiris/mathtype-ckeditor5)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-ckeditor5)

8.15.3

Affected versions (@wiris/mathtype-ckeditor4)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-ckeditor4)

8.15.3

Affected versions (@wiris/mathtype-generic)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-generic)

8.15.3

Affected versions (@wiris/mathtype-froala)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-froala)

8.15.3

Affected versions (@wiris/mathtype-tinymce5)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-tinymce5)

8.15.3

Affected versions (@wiris/mathtype-tinymce6)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-tinymce6)

8.15.3

Affected versions (@wiris/mathtype-tinymce7)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-tinymce7)

8.15.3

Affected versions (@wiris/mathtype-viewer)

<= 8.15.2As entered by the maintainer. Not reviewed.

Fixed in (@wiris/mathtype-viewer)

8.15.3

CVE

None cited by the advisory

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-10-05 09:05 UTC

   Published by the maintainers

   No CVE cited

2. 2026-11-10 15:05 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Waiting

   Reviewed by GitHub

4. Waiting

   In OSV; scanners can see it

Machine-readable record: feed/GHSA-23p7-42x4-gv9j.json