Server side template injection In mathjs
Description
Arbitrary Code Execution in mathjs math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
Recommendation
Update to version 3.17.0 or later.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 3.17.0 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.