Search/CVE-2026-53530
● CVE

CVE-2026-53530

DiscoveredAug 21, 2026UpdatedSep 9, 2026

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint ratex_parser::parse(&str) panics on the 9-byte input \verbéxé (i.e. \verb followed by the non-ASCII delimiter é). When handling a \verb command, the parser slices the verbatim argument with byte indices (arg[1..arg.len() - 1]); if the delimiter character is multibyte UTF-8, index 1 lands inside that character and Rust panics with *“byte index 1 is not a char boundary”*. Because RaTeX’s release profile sets panic = "abort" (Cargo.toml:48), the panic aborts the entire process — not just the current request/thread — making this a hard denial of service for any service that renders untrusted LaTeX. Version 0.1.11 fixes the issue.

CVSS v3.1
—
EPSS
0.43%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 23, 2026 → Sep 25, 2026
▲ 0.17pp
0.25% → 0.43% over 3 tracked changes
Connections
3 relationships
Timeline
disclosure → media coverage
Aug 21, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 9, 2026