8.8

CVE-2026-41139

Unsafe array index getter in mathjs

Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mathjs ≫ Mathjs SwPlatformnode.js Version >= 13.1.0 < 15.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.58% 0.432
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security-advisories@github.com 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://github.com/josdejong/mathjs/pull/3656
Patch
Issue Tracking
https://github.com/josdejong/mathjs/commit/0aee2f61866e35ffa0aef915221cdf6b026ffdd4
Patch
https://github.com/josdejong/mathjs/commit/bcf0da46f0b8577ec03c9ecd7bff8b5c2543a611
Patch
https://github.com/josdejong/mathjs/releases/tag/v15.2.0
Release Notes
https://bugzilla.redhat.com/show_bug.cgi?id=2467648
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41139.json
https://github.com/josdejong/mathjs/security/advisories/GHSA-5v89-rwgr-qj6g
Patch
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-41139