CVE-2026-41139highCWE-915CWE-94

CVE-2026-41139: high-severity vulnerability in josdejong mathjs

Unsafe array index getter in mathjs

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.6%
exploitation probability
0.6%top 53% of all CVEs
observed exploitation
nono source reports it
Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
josdejong · mathjs
Related CVEs — josdejong mathjs

In the same product, most dangerous first.

CVE-2026-40897HIGHMath.js: Unsafe object property setter in mathjsEPSS 0.6%
References
https://access.redhat.com/security/cve/CVE-2026-41139https://bugzilla.redhat.com/show_bug.cgi?id=2467648https://github.com/josdejong/mathjs/commit/0aee2f61866e35ffa0aef915221cdf6b026ffdd4https://github.com/josdejong/mathjs/commit/bcf0da46f0b8577ec03c9ecd7bff8b5c2543a611https://github.com/josdejong/mathjs/pull/3656https://github.com/josdejong/mathjs/releases/tag/v15.2.0https://github.com/josdejong/mathjs/security/advisories/GHSA-5v89-rwgr-qj6ghttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41139.json