CVE-2026-103923

Low

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026

Severity: Low; worst across findings
CVSS: 2.1; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 29; of 18,026 indexed, latest versions
Container images: 27; deployed by those charts
Fix available: 1 of 1; affected package

KaTeX: Existing prototype pollution can bypass trust restrictions

Carried by container images the latest versions of 29 of 18,026 indexed charts deploy, on 27 images.

Affected package	Affected versions	Fixed in	Images
katexnpm	0.12.0, 0.13.24, 0.15.3, 0.15.6+9 more	0.18.2	27

OSV records: GHSA-238p-pmpm-9mq7

Charts affected

29 by stars

Chart

Latest

Affected images

Radar Score

oneuptimeoneuptime

14.0.14

3 of 7 See more

oneuptime oneuptime 14.0.14

3 of the 7 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
oneuptime/nginx :release	f7849b60b16f	katex@0.16.47	0.18.2
oneuptime/probe :release	45988479c7fc	katex@0.16.47	0.18.2
oneuptime/runner :release	f2da6b9fd1a2	katex@0.16.47	0.18.2

Open the chart page →

8,996

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	katex@0.16.21	0.18.2

Open the chart page →

6,349

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	katex@0.16.4	0.18.2

Open the chart page →

5,489

krokicowboysysop

6.1.0

1 of 5 See more

kroki cowboysysop 6.1.0

1 of the 5 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	katex@0.16.27	0.18.2

Open the chart page →

8,476

misskeyalyti

1.0.0

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	katex@0.15.3	0.18.2

Open the chart page →

5,610

wikijsgeek-cookbook

6.4.2

1 of 1 See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	katex@0.12.0	0.18.2

Open the chart page →

6,275

librechatlibrechat

1.8.10

1 of 3 See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat :v0.7.7	8c68abbe1cff	katex@0.16.21	0.18.2

Open the chart page →

3,280

joplin-serverdjjudas21

6.0.0

1 of 1 See more

joplin-server djjudas21 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
joplin/server :3.7.2	3f7b852959aa	katex@0.16.23	0.18.2

Open the chart page →

2,964

recipesgeek-cookbook

6.6.2

1 of 2 See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	katex@0.13.24	0.18.2

Open the chart page →

8,710

plane-enterprisemakeplane

3.10.2

1 of 13 See more

plane-enterprise makeplane 3.10.2

1 of the 13 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
makeplane/space-commercial :v3.3.0	3dba6a659fb9	katex@0.16.47	0.18.2

Open the chart page →

6,161

supabasesupabse

0.8.0

1 of 11 See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
supabase/studio :2026.08.03-sha-022b374	606aca9fdaa7	katex@0.16.45	0.18.2

Open the chart page →

21,495

wikiwenerme

2.2.0

1 of 2 See more

2,599

adeptia-automate-mcpadeptia-automate-mcp

1.0.0

1 of 2 See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
adeptiainc/adeptia-automate-observe :1.0.0	31f295e948e6	katex@0.16.33	0.18.2

Open the chart page →

4,283

outlineadnoctem

0.1.2

1 of 1 See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
outlinewiki/outline :1.10.1	832051f039b4	katex@0.16.47	0.18.2

Open the chart page →

1,993

desishowbiz-frontenddesishowbiz

1.0.0

1 of 1 See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
rahulbhiwagade122/desishowbiz :latest	08490b70998c	katex@0.16.21	0.18.2

Open the chart page →

2,970

canary-checkerflanksource

1.2.0

1 of 2 See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
flanksource/canary-checker-ui :v1.4.281	764c84e550db	katex@0.16.27	0.18.2

Open the chart page →

5,394

facetflanksource

0.1.73

1 of 1 See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
ghcr.io/flanksource/facet :0.1.73	a0323f4283e5	katex@0.16.47	0.18.2

Open the chart page →

24,132

librechathajowieland

1.1.0

1 of 1 See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat :v0.7.8	7fe76551a78e	katex@0.16.21	0.18.2

Open the chart page →

3,651

wikijshomeenterpriseinc

1.4.0

1 of 1 See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
requarks/wiki :canary-2.5.243	8b5865a7386c	katex@0.12.0	0.18.2

Open the chart page →

4,609

kyso-frontkyso

1.0.0

1 of 1 See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
kyso/kyso-front :latest	e52595c5c16f	katex@0.15.6	0.18.2

Open the chart page →

2,883

code-serverquench-code-server

0.0.16

1 of 1 See more

code-server quench-code-server 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/code-serverdigest-pinned	b47da07b47ff	katex@0.16.22	0.18.2

Open the chart page →

rancher-auto-registerrancher-auto-register

0.1.0

1 of 1 See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ci-tools/tools :main	aa62b23f2b5e	katex@0.16.47	0.18.2

Open the chart page →

2,295

joplinrubxkube

1.3.1

1 of 2 See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
joplin/server :3.0-beta	52af57880c0e	katex@0.16.10	0.18.2

Open the chart page →

8,151

outlineschmitzis

0.0.8

1 of 4 See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	katex@0.16.4	0.18.2

Open the chart page →

5,489

joplin-serverschoenwald

1.0.3

1 of 1 See more

joplin-server schoenwald 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
joplin/server :3.7.2	3f7b852959aa	katex@0.16.23	0.18.2

Open the chart page →

2,964

supabaseteochenglim

0.1.2

1 of 13 See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
supabase/studio :latest	fdb56cfa1705	katex@0.16.45	0.18.2

Open the chart page →

10,655

joplintobiassackmann

0.1.7

1 of 2 See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-103923.

Container image	Digest	Package	Fixed in
joplin/server :latest	3f7b852959aa	katex@0.16.23	0.18.2

Open the chart page →

6,295

wikiwener

2.2.0

1 of 2 See more

2,599

wikiwikijs

3.0.0

1 of 2 See more

4,321

Container images carrying it

27 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
joplin/server :3.7.2 :latest	3f7b852959aa	katex@0.16.23	0.18.2	3
outlinewiki/outline :0.69.1	d060dcd8f9aa	katex@0.16.4	0.18.2	2
requarks/wiki :latest	fffff288a52f	katex@0.12.0	0.18.2	2
adeptiainc/adeptia-automate-observe :1.0.0	31f295e948e6	katex@0.16.33	0.18.2	1
flanksource/canary-checker-ui :v1.4.281	764c84e550db	katex@0.16.27	0.18.2	1
joplin/server :3.0-beta	52af57880c0e	katex@0.16.10	0.18.2	1
kyso/kyso-front :latest	e52595c5c16f	katex@0.15.6	0.18.2	1
makeplane/space-commercial :v3.3.0	3dba6a659fb9	katex@0.16.47	0.18.2	1
misskey/misskey :12.110.1	e08b7c478093	katex@0.15.3	0.18.2	1
oneuptime/nginx :release	f7849b60b16f	katex@0.16.47	0.18.2	1
oneuptime/probe :release	45988479c7fc	katex@0.16.47	0.18.2	1
oneuptime/runner :release	f2da6b9fd1a2	katex@0.16.47	0.18.2	1
outlinewiki/outline :0.82.0	494dfb9249a6	katex@0.16.21	0.18.2	1
outlinewiki/outline :1.10.1	832051f039b4	katex@0.16.47	0.18.2	1
rahulbhiwagade122/desishowbiz :latest	08490b70998c	katex@0.16.21	0.18.2	1
requarks/wiki :canary-2.5.243	8b5865a7386c	katex@0.12.0	0.18.2	1
requarks/wiki :2	af71a17dc27c	katex@0.12.0	0.18.2	1
supabase/studio :2026.08.03-sha-022b374	606aca9fdaa7	katex@0.16.45	0.18.2	1
supabase/studio :latest	fdb56cfa1705	katex@0.16.45	0.18.2	1
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	katex@0.13.24	0.18.2	1
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	katex@0.16.27	0.18.2	1
ghcr.io/danny-avila/librechat :v0.7.8	7fe76551a78e	katex@0.16.21	0.18.2	1
ghcr.io/danny-avila/librechat :v0.7.7	8c68abbe1cff	katex@0.16.21	0.18.2	1
ghcr.io/flanksource/facet :0.1.73	a0323f4283e5	katex@0.16.47	0.18.2	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	katex@0.12.0	0.18.2	1
ghcr.io/quenchworks/images/code-server	b47da07b47ff	katex@0.16.22	0.18.2	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	aa62b23f2b5e	katex@0.16.47	0.18.2	1