RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
https://retirejs.github.io/retire.js/
Other
3.66k stars 414 forks source link

Add Mathjax to the repository #429

Closed adarisc closed 6 months ago

adarisc commented 6 months ago

I regularly use Burp Suite at work, recently it came to my attention that the javascript vulnerability checks, which utilize retire.js, do not include Mathjax, a popular JS library which a number of my company's websites use. I would like to request that Mathjax be added to the retuire.js repository, specifically https://www.cve.org/CVERecord?id=CVE-2018-1999024.

eoftedal commented 6 months ago

Tested with version 3.0.1 on cdn.jsdelivr.net and 3.2.2 on cloudflare cdn

eoftedal commented 6 months ago

Test added for 2.7.3 as well