Luatex Project Luatex
2 CVEs affecting Luatex Project Luatex. Latest disclosed: 2023-05-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32700 | High | 7.8 | 2023-05-20 | LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core… |
CVE-2023-32668 | Medium | 5.5 | 2023-05-11 | LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket l… |