PT-2026-33384 · Red Hat+4 · Red Hat Developer Hub+7
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Math.js versions 13.1.1 through 15.1.x
Description
An issue in the expression parser allows the execution of arbitrary JavaScript. This occurs in applications where users are permitted to evaluate arbitrary expressions using the mathjs expression parser.
Recommendations
Update to version 15.2.0.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Red Hat Developer Hub
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Openshift
Red Hat Openshift Container Platform 4
Self-Service Automation Portal 2
Math.Js