https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T23:15:46.559070+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2023-32700 CVE-2023-32700 2026-10-22T23:15:46.560371+00:00

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

 https://db.gcve.eu/vuln/usn-6115-1 USN-6115-1 — texlive-bin vulnerability 2026-10-22T23:15:46.560433+00:00

Affected: Ubuntu:18.04:LTS: texlive-bin, Ubuntu:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin

Max Chernoff discovered that LuaTeX (TeX Live) did not properly disable shell escape. An attacker could possibly use this issue to execute arbitrary shell commands.