mathjs vulnerabilities

2 known vulnerabilities in mathjs from Josdejong. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  mathjs: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2026-41139May 7, 2026Josdejong

  Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.

• 8.8 High severity

  mathjs: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2026-40897Apr 24, 2026Josdejong

  Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15.2.0, a vulnerability allowed executing arbitrary JavaScript via the expression parser of mathjs. You can be affected when you have an application where users can evaluate