sagemathinc/cocalc

sagemathinc/cocalc

Releases1

Frequency

Last Release 7 months ago

Stars1.28K

CoCalc: Collaborative Calculation in the Cloud

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-61514 ↗	Oct 16, 2025Thursday, 16 October 2025, 19:15	6.5 MEDIUM	—
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file.
CVE-2024-36109 ↗	May 28, 2024Tuesday, 28 May 2024, 19:15	7.6 HIGH	—
CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected versions the markdown parser allows `<script>` tags to be included which execute when published. This issue has been addressed in commit `419862a9c9879c`. Users are advised to upgrade. There are no known workarounds for this vulnerability.