{"action":"Upgrade mathjs to 7.5.1 or later.","affected":[{"fixed":"7.5.1","introduced":"0"}],"component":"mathjs","cve_ids":["CVE-2020-7743"],"ecosystem":"npm","epss":0.03924,"exploited":false,"fixed_versions":["7.5.1"],"ghsa_id":"GHSA-x2fc-mxcx-w4mf","id":"tcs_01M5KGGGBBZP0MPNTFH2Z3A9WY","modified_at":"2025-01-14T08:57:11.940336Z","published_at":"2021-05-10T18:39:04Z","references":["https://osv.dev/vulnerability/GHSA-x2fc-mxcx-w4mf","https://nvd.nist.gov/vuln/detail/CVE-2020-7743","https://github.com/josdejong/mathjs/commit/ecb80514e80bce4e6ec7e71db8ff79954f07c57e","https://github.com/josdejong/mathjs/blob/develop/HISTORY.md#2020-10-10-version-751","https://github.com/josdejong/mathjs/blob/develop/src/utils/object.js%23L82","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1017113","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1017112","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1017111","https://snyk.io/vuln/SNYK-JS-MATHJS-1016401","https://www.npmjs.com/package/mathjs"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-x2fc-mxcx-w4mf","url":"https://osv.dev/vulnerability/GHSA-x2fc-mxcx-w4mf"}],"summary":"Prototype Pollution in mathjs"}