Authentication mechanism absence or evasion In mathjs
Description
Prototype Pollution in mathjs The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 7.5.1 |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4.