Arbitrary Code Execution in mathjs (GHSA-vx5c-87qx-cv6c)
Published: 2017-12-18T22:27:45Z
Aliases: CVE-2017-1001002
Severity: CRITICAL · CWE: CWE-94

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.


## Recommendation

Update to version 3.17.0 or later.

Affected packages:
package: ecosystem: npm
name: mathjs
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 3.17.0