CVE-2017-1001003

CVE-2017-1001003

This page contains facts from public vulnerability sources. Check the original advisory before updating.

math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

CVSS 9.8 · Critical · EPSS 1.7% · Fix available

Published

2017-11-27T14:00:00.000Z

Updated

2024-09-17T03:18:21.144Z

Stack: node

Check your server →