math.js math.js - 2 CVEs, 1 Versions

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

UNKNOWN Nov 27, 2017

CVE-2017-1001003

math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

UNKNOWN Nov 27, 2017