CVE-2017-1001002: Arbitrary Code Execution

November 27, 2017 (updated October 9, 2019)

math.js has an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

References

github.com/josdejong/mathjs/blob/master/HISTORY.md
github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90

Code Behaviors & Features

Detect and mitigate CVE-2017-1001002 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →