math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.
math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.