Metacalc vulnerabilities
We track 1 vulnerability in Metacalc products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Metacalc vulnerabilities
- 9.8 Critical severity
metacalc: Improper Control of Generation of Code
The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constructor.