CVE-2020-7743: Mathjs

High severity, CVSS 7.3. EPSS: 3.9% chance of exploitation in the next 30 days.

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

Affected products

• Mathjs Mathjs: before 7.5.1 (fixed in 7.5.1)

Published 2020-10-13. Last modified 2026-06-17.