Gnu Org Mode — known CVE vulnerabilities

Every CVE whose affected-product data names Gnu Org Mode, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-28617 — CVSS 7.8 (high): org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file…
• CVE-2024-30202 — CVSS 7.8 (high): In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.
• CVE-2024-30205 — CVSS 7.1 (high): In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
• CVE-2024-30203 — CVSS 5.5 (medium): In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
• CVE-2024-30204 — CVSS 2.8 (low): In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.