GHSA-29qv-4j9f-fjw5
High · 8.8CVSS
8.8
EPSS
—
Published
Apr 16, 2026
CISA due date
—
The record
Unsafe object property setter in mathjs
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | mathjs | 13.1.1 | 15.2.0 |
Related vulnerabilities
- CVE-2026-40897 Math.js is an extensive math library for JavaScript and Node.js. Same vulnerability
- CVE-2026-41139 Math.js is an extensive math library for JavaScript and Node.js. Also affects mathjs
- GHSA-jvff-x2qm-6286 mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object… Also affects mathjs
- CVE-2026-96378 Improperly Controlled Modification of Dynamically-Determined Object Attributes… CWE-915
- CVE-2026-84645 In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing… CWE-915
- CVE-2026-84430 A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. CWE-915
- CVE-2026-83557 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically… CWE-915
- CVE-2026-78038 Improperly Controlled Modification of Dynamically-Determined Object Attributes… CWE-915