Lucene search
GoogleOSV:GHSA-X2FC-MXCX-W4MFHistoryMay 10, 2021 - 6:39 p.m.
Prototype Pollution in mathjs
2021-05-1018:39:04
Google
osv.dev
7
0.002 Low
EPSS
Percentile
64.6%
The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
References
github.com/josdejong/mathjs/blob/develop/HISTORY.md#2020-10-10-version-751
github.com/josdejong/mathjs/blob/develop/src/utils/object.js%23L82
github.com/josdejong/mathjs/commit/ecb80514e80bce4e6ec7e71db8ff79954f07c57e
nvd.nist.gov/vuln/detail/CVE-2020-7743
snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1017113
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1017112
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1017111
snyk.io/vuln/SNYK-JS-MATHJS-1016401
www.npmjs.com/package/mathjs
Related
cvelist
cvelist
CVE-2020-7743 Prototype Pollution
2020-10-13 00:00:00
veracode
veracode
Prototype Pollution
2020-10-14 02:24:54
redhatcve
redhatcve
CVE-2020-7743
2020-10-13 20:20:23
osv
osv
CVE-2020-7743
2020-10-13 10:15:13
cve
cve
CVE-2020-7743
2020-10-13 10:15:13
prion
prion
Default configuration
2020-10-13 10:15:00
nodejs
nodejs
Prototype Pollution
2021-05-10 18:40:30
github
github
Prototype Pollution in mathjs
2021-05-10 18:39:04
nvd
nvd
CVE-2020-7743
2020-10-13 10:15:13
redhat
redhat