Approved changes feed: RSS · Atom

cpe:2.3:a:mathjs:math.js:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMathjs (3cd2f8d9-81fa-598e-a7cb-4e3ce10465f2)
ProductMath.Js (ddee99a2-2849-50f5-a92a-da3665e9591a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/josdejong/mathjs purl2cpe 2026-06-01 10:17:46.962529
pkg:sourceforge/mathjs purl2cpe 2026-06-01 10:17:46.962533

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1001002 vulnerable 2026-06-08 05:08:34.740044 Details available
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
Published: 2017-11-27T14:00:00.000Z
Updated: 2024-09-16T16:59:06.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.