cbcvebase.

Mauriciopoppe Math-Codegen vulnerabilities

1 known vulnerability affecting mauriciopoppe/math-codegen.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-41507P2CRITICALCVSS 9.8fixed in 0.4.32026-05-08
CVE-2026-41507 [CRITICAL] CWE-94 CVE-2026-41507: math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal co math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Function() body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the parser. Any application exposing a math evaluation en
nvd
Mauriciopoppe Math-Codegen vulnerabilities | cvebase