Filtered by vendor Expr-eval Project Subscriptions
Filtered by product Expr-eval Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12735 1 Expr-eval Project 1 Expr-eval 2025-11-05 N/A
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted variables object into the evaluate() function and trigger arbitrary code execution.