Skip to content

Bump mathjs from 11.8.2 to 11.9.1

HIFIS Bot requested to merge dependabot/npm_and_yarn/mathjs-11.9.1 into master

Bumps mathjs from 11.8.2 to 11.9.1.

Changelog

Sourced from mathjs's changelog.

2023-07-24, 11.9.1

  • Fix a security vulnerability in FunctionNode and SymbolNode allowing arbitrary code execution via math.evaluate. Thanks Harry Chen.
  • Fix #3001: mathjs bundle containing new Function(...) (CSP issue).

2023-07-19, 11.9.0

Commits
  • 563ff63 chore: publish v11.9.1
  • 6dcbc6b fix: security vulnerability in FunctionNode and SymbolNode allowing arbit...
  • d0d11a2 fix #3001: mathjs bundle containing new Function(...) (CSP issue)
  • 5477d38 chore: update devDependencies
  • 7f6b4f9 chore: publish v11.9.0
  • b2a606b Merge remote-tracking branch 'origin/develop' into develop
  • 8855ba5 docs: update HISTORY.md
  • 8fe5e51 feat: support units in range (#2997)
  • 14614f2 chore: update history and authors
  • 8475ab9 zpk2tf and freqz functions implementation (#2988)
  • Additional commits viewable in compare view

Merge request reports