CVE-2017-1001003

CVE-2017-1001003 affects math.js prior to 3.17.0. The issue allows private properties (e.g., a constructor) to be replaced by using Unicode characters when creating an object, which can alter object behavior. Documents reference upgrades to 3.17.0+ as the advised remediation and indicate the vuln...

CVE-2017-1001003: Improper Neutralization of Argument Delimiters in a Command

math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object...