Skip to content
OpenAdvisories

Package · npm

mathjs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-1001003

    Arbitrary Code Execution in mathjs

    math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

    math.js math.js mathjs npm
  • Critical 9.8
    CVE-2017-1001002

    Arbitrary Code Execution in mathjs

    math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

    math.js math.js mathjs npm