Mathjs — known CVE vulnerabilities

Every CVE whose affected-product data names Mathjs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-40897 — CVSS 8.8 (high): Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15.2.0, a vulnerability allowed executing arbitrary…
• CVE-2026-41139 — CVSS 8.8 (high): Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be…
• CVE-2020-7743 — CVSS 7.3 (high): The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.