Hi,

The following vulnerability was published for mathjax.

CVE-2023-39663[0]:
| Mathjax up to v2.7.9 was discovered to contain two Regular
| expression Denial of Service (ReDoS) vulnerabilities in MathJax.js
| via the components pattern and markdownPattern. NOTE: the vendor
| disputes this because the regular expressions are not applied to
| user input; thus, there is no risk.

https://github.com/mathjax/MathJax/issues/3074

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-39663
https://www.cve.org/CVERecord?id=CVE-2023-39663

Please adjust the affected versions in the BTS as needed.