fromNist5 days agoJavaScriptNVDMath.js versions 13.1.0 to 15.1.9 contain a vulnerability allowing arbitrary JavaScript execution through the expression parser, fixed in version 15.2.0.