Yesterday someone found CSS injection on Github profile using Math mode. Now Patched BTW

diving into mathjax css injection attack

a write-up on the recent mathjax css injection vulnerability