We have just released Typst 0.14.2. We are publishing this patch release so shortly after 0.14.1 because a memory handling vulnerability was found in the WebAssembly runtime used for executing Typst plugins. Based on our investigation, this vulnerability would be very hard to exploit in practice, but an exploit could theoretically be feasible. For this reason, we highly recommend upgrading to Typst 0.14.2. This holds in particular for local users. In the web app, the bug is not critical as the b...