Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-1001002
7.5
HIGHCVSS v2
Published
November 27, 2017
Affected
3 projects
Assigned by
46fe6300-5254-4a98-9594-a9567bec8179
Severity scale
010
Description
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
mathjs
NPMMath.js is an extensive math library for JavaScript and Node.js. It features a flexible expression parser with support for symbolic computation, comes with a large set of built-in functions and constants, and offers an integrated solution to work with dif
NPMMath.js is an extensive math library for JavaScript and Node.js. It features a flexible expression parser with support for symbolic computation, comes with a large set of built-in functions and constants, and offers an integrated solution to work with dif<= 3.17.0, < 3.17.0NVD
@types/mathjsNPMStub TypeScript definitions entry for mathjs, which provides its own types definitions
NPMStub TypeScript definitions entry for mathjs, which provides its own types definitions<= 3.17.0, < 3.17.0NVD
GitHub