mathjs records

4 published records for vendor mathjs.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-1001002No exploit	math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine.mathjs · math.js · CWE-94 pre-auth RCE	Critical9.8	—	2.4%	Nov 27, 2017
35Monitor	CVE-2026-41139No exploit	Unsafe array index getter in mathjsmathjs · mathjs · CWE-915	High8.8	—	0.8%	May 7, 2026
35Monitor	CVE-2026-40897Proof of concept	Math.js: Unsafe object property setter in mathjsmathjs · mathjs · CWE-915	High8.8	—	0.8%	Apr 24, 2026
30Monitor	CVE-2020-7743No exploit	The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.mathjs · mathjs · CWE-1321 Pre-auth Prototype pollution	High7.3	—	3.9%	Oct 13, 2020

CVE-2017-1001002
40Plan
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
mathjs · math.jsNov 27, 2017
CVE-2026-41139
35Monitor
Unsafe array index getter in mathjs
HighCVSS 8.8No exploitEPSS 1%
mathjs · mathjsMay 7, 2026
CVE-2026-40897
35Monitor
Math.js: Unsafe object property setter in mathjs
HighCVSS 8.8Proof of conceptEPSS 1%
mathjs · mathjsApr 24, 2026
CVE-2020-7743
30Monitor
The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
HighCVSS 7.3No exploitEPSS 4%
- Pre-auth
- Prototype pollution
mathjs · mathjsOct 13, 2020