math.js

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

math.js records in CISA KEV

No math.js vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Math.js · all components

TI-2017-14722 CVE-2017-1001002 · GHSA-vx5c-87qx-cv6c

MEDIUM 47

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02357 Published 2017-11-27 Fixed in 3.17.0 CWE-94