npm/mathjs CVE-2017-1001002: critical 9.8, EPSS 2.36%
Arbitrary Code Execution in mathjs
Action: Upgrade mathjs to 3.17.0 or later.
npm i mathjs@3.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.17.0 | - |
Fixed versions
| 3.17.0 |
Sources
- osv: GHSA-vx5c-87qx-cv6c
- https://nvd.nist.gov/vuln/detail/CVE-2017-1001002
- https://github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90
- https://github.com/advisories/GHSA-vx5c-87qx-cv6c
- https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170
- https://www.npmjs.com/advisories/552
CVE-2017-1001002 · published · modified · JSON