CVE-2026-40897
1 advisory.
npm/mathjs CVE-2026-40897: high 8.8, EPSS 0.76%
Unsafe object property setter in mathjs
Action: Upgrade mathjs to 15.2.0 or later.
npm i mathjs@15.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.1.1 | 15.2.0 | - |
Fixed versions
| 15.2.0 |
Sources
- osv: GHSA-29qv-4j9f-fjw5
- https://github.com/josdejong/mathjs/security/advisories/GHSA-29qv-4j9f-fjw5
- https://nvd.nist.gov/vuln/detail/CVE-2026-40897
- https://github.com/josdejong/mathjs/pull/3656
- https://github.com/josdejong/mathjs/commit/513ab2a0e01004af91b31aada68fae8a821326ad
- https://github.com/josdejong/mathjs
CVE-2026-40897 · published · modified · JSON