---
id: CVE-2026-53531
title: RaTeX is a KaTeX-compatible math rendering engine written in Rust
summary: >-
  RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to
  version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native
  stack frame per nesting level at `{`, `\left`, `\sqrt{`, `^{`, etc, with no
  maximu…
severity: medium
cwe:
  - CWE-400
  - CWE-674
vendor: ratex-parser
product: ratex-parser
affected:
  - ratex-parser < 0.1.11
patched:
  - ratex-parser 0.1.11
published: '2026-08-21'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T21:06:39.057'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53531'
references:
  - url: 'https://github.com/erweixin/RaTeX/security/advisories/GHSA-4w5h-hx6r-28q7'
    label: security-advisories@github.com
  - url: 'https://github.com/erweixin/RaTeX/security/advisories/GHSA-4w5h-hx6r-28q7'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/advisories/GHSA-4w5h-hx6r-28q7'
tags:
  - nvd
  - ghsa
  - rust
epss: 0.00426
epssPercentile: 0.34112
aliases:
  - GHSA-4w5h-hx6r-28q7
ecosystem: rust
ingestedAt: '2026-07-07T23:43:59.379Z'
---

## Overview

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\left`, `\sqrt{`, `^{`, etc, with no maximum depth limit. A short, ~10 KB input of nested groups overflows the 8 MB main-thread stack and aborts the process. With `panic = "abort"` (`Cargo.toml:48`), and because a Rust stack overflow is always a fatal `SIGABRT` regardless of panic strategy this is an unrecoverable, whole-process denial of service reachable from a single untrusted LaTeX string. Version 0.1.11 fixes the issue.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-53531)

Affected packages:

- `ratex-parser < 0.1.11`

Patched in:

- `ratex-parser 0.1.11`

Source: https://github.com/advisories/GHSA-4w5h-hx6r-28q7