javascript_expression_evaluator vulnerabilities

CVEs whose affected-version data names the javascript_expression_evaluator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-13204High· 7.3

10mo ago

npm package `expr-eval` is vulnerable to Prototype Pollution

npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package reso…

▾ Twilightsilentmatt · javascript_expression_evaluatorEPSS 0.45%via NVD