Veille CVE

Recherche « Mathjs mathjs »

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Mathjs mathjs » ✕
  1. CVE-2026-85610 8.8 Élevée

    Openpanel-dev openpanel

    OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with read access to execute arbitrary code by recovering the native JavaScript Function constructor through mathjs matrix objects. Attackers can use the recovered constructor to load Node.js built-ins and execute operating system commands with the privileges of the API process, bypassing organization authorization boundaries.

  2. CVE-2026-41139 8.8 Élevée

    josdejong mathjs · Red Hat Cryostat 4 · Red Hat Developer Hub · Red Hat Enterprise Linux 10

    Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.