Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

gnu / org_mode CVEs

Beta · best-effort

5 CVEs tagged to gnu / org_mode — 0 Critical, 3 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to gnu vendor archive

CVE-2024-30205

Published Mar 25, 2024

In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2024-30204

Published Mar 25, 2024

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.

CVSS 2.8 · Low

Vendor/product tagsBeta · best-effort

CVE-2024-30203

Published Mar 25, 2024

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-30202

Published Mar 25, 2024

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-28617

Published Mar 19, 2023

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1