← Database

CVE-2022-21122

CRITICAL CVSS: 9.0 Published: 2022-06-08 Modified: 2026-06-17

Description

The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constructor.

Affected Platforms

Metarhia Metacalc

Weakness Type

CWE-94

References