VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Nov 11, 2026

CVE-2026-65973

CVE-2026-65973

Description

Laradocs maintains version-controlled documentation inside a Laravel codebase. From version 0.4.0 to before version 1.0.0, Laradocs is vulnerable to local command injection in server-side KaTeX rendering via an unescaped Node.js binary path in a proc_open() command string. This issue has been patched in version 1.0.0.

Affected products

2
  • Petebishwhip/Laradocsreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 0.4.0 <= version < 1.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.