CVE-2026-41139
1 advisory.
npm/mathjs CVE-2026-41139: high 8.8
mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes
Action: Upgrade mathjs to 15.2.0 or later.
npm i mathjs@15.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.1.0 | 15.2.0 | - |
Fixed versions
| 15.2.0 |
Sources
- osv: GHSA-jvff-x2qm-6286
- https://github.com/josdejong/mathjs/security/advisories/GHSA-5v89-rwgr-qj6g
- https://github.com/josdejong/mathjs/security/advisories/GHSA-jvff-x2qm-6286
- https://nvd.nist.gov/vuln/detail/CVE-2026-41139
- https://github.com/josdejong/mathjs/pull/3656
- https://github.com/josdejong/mathjs/commit/0aee2f61866e35ffa0aef915221cdf6b026ffdd4
- https://github.com/josdejong/mathjs/commit/bcf0da46f0b8577ec03c9ecd7bff8b5c2543a611
- https://github.com/josdejong/mathjs
- https://github.com/josdejong/mathjs/releases/tag/v15.2.0
CVE-2026-41139 · published · modified · JSON