# Typst v0.14.2 — Version 0.14.2 (December 12, 2025)

- Product: Typst (https://whatsnew.fyi/product/typst)
- Vendor: Typst
- Date: 2025-12-12
- Version: v0.14.2
- Original notes: https://github.com/typst/typst/releases/tag/v0.14.2
- Permalink: https://whatsnew.fyi/product/typst/releases/v0.14.2

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Update the WebAssembly runtime used for executing plugins to fix a use-after-free memory handling vulnerability
- **added** — Add a hint when array.sorted fails because a pair of elements could not be compared

[View changelog with links into the documentation on typst.app/docs](https://typst.app/docs/changelog/0.14.2/)

##### Security
- Updated the WebAssembly runtime used for executing plugins. The version used in Typst 0.14.0 and 0.14.1 suffers from a memory handling vulnerability. Based on our investigation, the vulnerability would be very hard to exploit in practice, but an exploit could theoretically be feasible. In any case, **we recommend upgrading to Typst 0.14.2.** This holds in particular for local users. In the web app, the bug is not critical as the browser offers an extra layer of protection.

  Typst 0.13.1 and below are not affected by this vulnerability.

  _Technical details:_ The [`wasmi`](https://github.com/wasmi-labs/wasmi/) WebAssembly runtime versions used in 0.14.0 and 0.14.1 have a _use-after-free_ memory handling bug in certain memory growth situations. Specifically, the bug occurs when the plugin tries to grow its memory, but allocating the requested amount of memory fails. Based on our investigation, the bug is hard to trigger in practice as the WebAssembly linear memory is always limited to 4GB on a technical level and modern operating systems rarely fail to serve a 4GB memory allocation request (typically not even under RAM pressure). Once the bug is triggered, it would also still be very challenging to turn it into an actual exploit. Regardless, we recommend upgrading to Typst 0.14.2 for protection against a potential exploit.

##### Diagnostics
- Added a hint when `array.sorted` fails because a pair of elements could not be compared. This hint aids with fixing bugs in user code that were surfaced by a change in internal sorting behavior in Typst 0.14.1.

##### Contributors
Thanks to everyone who contributed to this release: @Andrew15-5, @cady-b, @ecstrema, @saecki, @ultimatile.