Vulnerabilities > Luatex Project > Luatex > 1.11.1

DATE CVE VULNERABILITY TITLE RISK
2023-05-20 CVE-2023-32700 LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source.
local
low complexity
luatex-project miktex tug
7.8
7.8
2023-05-11 CVE-2023-32668 LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests.
local
low complexity
tug luatex-project miktex
5.5
5.5