Org Mode (Gnu) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 391 known versions, newest CVE from 2024-03-25. Vendor: Gnu.

CVEs of Org Mode

• CVE-2024-30204 - CVSS 2.8 (low), 2024-03-25: In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
• CVE-2024-30203 - CVSS 5.5 (medium), 2024-03-25: In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
• CVE-2024-30202 - CVSS 7.8 (high), 2024-03-25: In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.
• CVE-2024-30205 - CVSS 7.1 (high), 2024-03-25: In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
• CVE-2023-28617 - CVSS 7.8 (high), 2023-03-19: org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory…