Jorenbroekema

jorenbroekema

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Javascript Expression Evaluator

javascript_expression_evaluator

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-12735 2Jorenbroekema Silentmatt 2Javascript Expression Evaluator Javascript Expression Evaluator Jun 17, 2026 Nov 5, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass...Show more The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-12735

2Jorenbroekema

Silentmatt

2Javascript Expression Evaluator

Javascript Expression Evaluator

Jun 17, 2026

Nov 5, 2025

N/A· v4

9.8 CRITICAL· v3

N/A· v2

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.Show less