{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-14T02:09:28.252","vulnerabilities":[{"cve":{"id":"CVE-2017-1001002","sourceIdentifier":"46fe6300-5254-4a98-9594-a9567bec8179","published":"2017-11-27T14:29:00.240","lastModified":"2026-06-17T00:59:18.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution."},{"lang":"es","value":"Las versiones anteriores a la 3.17.0 de math.js tenían una vulnerabilidad de ejecución de código arbitrario en el motor de JavaScript. La creación de una función escrita con código JavaScript en el nombre podría resultar en la ejecución arbitraria."}],"affected":[{"source":"46fe6300-5254-4a98-9594-a9567bec8179","affectedData":[{"vendor":"math.js","product":"math.js","versions":[{"version":"3.17.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"46fe6300-5254-4a98-9594-a9567bec8179","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mathjs:math.js:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17.0","matchCriteriaId":"CAA4C359-CEFC-48E5-ADD9-42689961238F"}]}]}],"references":[{"url":"https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170","source":"46fe6300-5254-4a98-9594-a9567bec8179"},{"url":"https://github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90","source":"46fe6300-5254-4a98-9594-a9567bec8179"},{"url":"https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}