NLP.js vulnerabilities

CVEs whose affected-version data names the NLP.js package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112102Medium· 6.3

AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection

A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument co…

▾ SunlitAXA Group · NLP.jsvia CVEORG

NLP.js vulnerabilities (CVEs) · VulnSea