Max Chernoff discovered that improperly secured shell-escape in LuaTeX may result in arbitrary shell command execution, even with shell escape disabled, if specially crafted tex files are processed.
Comment
Archive for May 20th, 2023
3 results.
The newest upstream commit Security fix for CVE-2023-2426