p PatchFirst

CVE-2020-7743

CVE-2020-7743 · Prototype Pollution

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

CVSS 7.3 · High · EPSS 3.9% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • mathjs

    Versions
    • ≥ unspecified, < 7.5.1: Affected (custom)

    Update to 7.5.1

  • mathjs npm

    Affected ranges
    • SEMVER: < 7.5.1

    Update to 7.5.1

Original sources

Check your server →