Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: math.js Component: Mathjs Clear all filters
TI-2026-29767 CVE-2026-41139 · GHSA-jvff-x2qm-6286

Unsafe array index getter in mathjs

Priority MEDIUM 41

Math.js is an extensive math library for JavaScript and Node.js.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00577 Published 2026-05-07 Fixed in 15.2.0 CWE-915
TI-2026-29553 CVE-2026-40897 · GHSA-29qv-4j9f-fjw5

Math.js: Unsafe object property setter in mathjs

Priority MEDIUM 41

Math.js is an extensive math library for JavaScript and Node.js.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00551 Published 2026-04-24 Fixed in 15.2.0 CWE-915
TI-2020-06261 CVE-2020-7743 · GHSA-x2fc-mxcx-w4mf

Prototype pollution in mathjs

Priority LOW 39

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03924 Published 2020-10-13 Partial fix · 7.5.1 CWE-1321