7.3
High
CVE-2020-7743 The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon…
Description
The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mathjs 7.5 | earliest → < 7.5.1 | 7.5.1 |