Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-12735 1 Expr-eval Project 1 Expr-eval 2025-11-05 9.8 Critical
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted variables object into the evaluate() function and trigger arbitrary code execution.