Skip to main content
cve.nowby Sazabi
← npm
npmPackage

mathjs

5 known vulnerabilities (3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 high
Weekly downloads
5.3M
Dependents
607
Registry
npm

Advisories 5

  • Unsafe array index getter in mathjs

    Affected: from 13.1.0, fixed in 15.2.0.

  • Math.js: Unsafe object property setter in mathjs

    Affected: from 13.1.1, fixed in 15.2.0.

  • Prototype Pollution

    Affected: fixed in 7.5.1.

  • math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when…

    Affected: fixed in 3.17.0.

  • math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine.

    Affected: fixed in 3.17.0.