math-codegen vulnerabilities

1 known vulnerability in math-codegen from Mauriciopoppe. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  math-codegen: Improper Control of Generation of Code

  CVE-2026-41507May 8, 2026Mauriciopoppe

  math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Function() body without sanitization. This allows an attacker to execute arbitrary system commands wh