CVE-2026-41139

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-41139
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41139.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-41139
Aliases
Downstream
Published
2026-05-07T05:06:28Z
Modified
2026-08-12T03:51:18Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Unsafe array index getter in mathjs
Details

Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-915"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41139.json"
}
References

Affected packages

Git / github.com/josdejong/mathjs

Affected ranges

Type
GIT
Repo
https://github.com/josdejong/mathjs
Events
Introduced
00a985dbfe2a862b8bf7da0c2261526983531a0d
Fixed
fee4561840043a7473962367bbae6f15bbb3cebb
Fixed
0aee2f61866e35ffa0aef915221cdf6b026ffdd4
Fixed
bcf0da46f0b8577ec03c9ecd7bff8b5c2543a611
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:mathjs:mathjs:*:*:*:*:*:node.js:*:*",
    "extracted_events": [
        {
            "introduced": "13.1.0"
        },
        {
            "fixed": "15.2.0"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v13.*
v13.1.0
v13.1.1
v13.2.0
v14.*
v14.0.0
v14.0.1
v14.1.0
v14.2.0
v14.2.1
v14.3.0
v14.3.1
v14.4.0
v15.*
v15.0.0
v15.1.0
v15.1.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41139.json"