8.8

CVE-2026-40897

Math.js: Unsafe object property setter in mathjs

Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15.2.0, a vulnerability allowed executing arbitrary JavaScript via the expression parser of mathjs. You can be affected when you have an application where users can evaluate arbitrary expressions using the mathjs expression parser. This vulnerability is fixed in 15.2.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mathjs ≫ Mathjs SwPlatformnode.js Version >= 13.1.1 < 15.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.419
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security-advisories@github.com 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

https://github.com/josdejong/mathjs/pull/3656
Issue Tracking
https://github.com/josdejong/mathjs/commit/513ab2a0e01004af91b31aada68fae8a821326ad
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=2461612
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40897.json
https://github.com/josdejong/mathjs/security/advisories/GHSA-29qv-4j9f-fjw5
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-40897