~ / search / GHSA-x2fc-mxcx-w4mf

GHSA-x2fc-mxcx-w4mf

Prototype Pollution in mathjs

Source: GitHub Advisory Database (reviewed) High CVE-2020-7743

Packages

EcosystemPackageAffectedFixed in
npm mathjs < 7.5.1 7.5.1

Details

As written in the advisory (Markdown source, shown as plain text).

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

References

External links from the advisory. They lead to third-party sites.