Skip to content
7.3 High

CVE-2020-7743 The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon…

Description

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

Affected products and versions

Product Affected versions Fixed in
mathjs 7.5 earliest → < 7.5.1 7.5.1
Track this CVE