Lucene search
+L

46 matches found

CVE
CVE
•added 2020/10/13 9:15 a.m.•118 views

CVE-2020-7743

The vulnerability described in CVE-2020-7743 affects the mathjs package prior to version 7.5.1, enabling Prototype Pollution via the deepExtend function during configuration updates. This is a general software vulnerability in mathjs, with no explicit exploit details provided in the connected doc...

7.5CVSS7.1AI score0.03924EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2020/10/13 9:15 a.m.•55 views

CVE-2020-7743 Prototype Pollution

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates...

7.3CVSS7.1AI score0.03924EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2020/10/13 9:14 a.m.•8 views

CVE-2020-7743

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates...

7.5CVSS7.3AI score0.03924EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/13 12:00 a.m.•4 views

CVE-2020-7743: Improperly Controlled Modification of Object Prototype Attributes

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates...

7.5CVSS5.8AI score0.03924EPSS
SaveExploits1References2
Snyk
Snyk
•added 2020/10/07 3:29 p.m.•14 views

Prototype Pollution

Overview mathjs is a math library for JavaScript and Node.js. It features a flexible expression parser with support for symbolic computation, comes with a large set of built-in functions and constants, and offers an integrated solution to work with diff. Affected versions of this package are...

7.5CVSS8.1AI score0.03924EPSS
SaveExploits1References2
Snyk
Snyk
•added 2020/07/11 10:19 a.m.•13 views

Prototype Pollution

Overview i18next is an internationalization framework for browser or any other javascript environment eg. node.js. Affected versions of this package are vulnerable to Prototype Pollution. This vulnerability relates to the AddResourceBundle API which uses the the deepExtend function...

4.8CVSS6.4AI score
SaveExploits0References2
Rows per page
Query Builder