Lucene search

K
nodejsAnonymousNODEJS:1698
HistoryMay 10, 2021 - 6:40 p.m.

Prototype Pollution

2021-05-1018:40:30
Anonymous
www.npmjs.com
25

0.003 Low

EPSS

Percentile

68.7%

Overview

mathjs before version 7.5.1 is vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

Recommendation

Upgrade to version 7.5.1 or later

References

CPENameOperatorVersion
mathjslt7.5.1

0.003 Low

EPSS

Percentile

68.7%