CVE-2025-12735

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.

References

Affected packages

Git / github.com/silentmatt/expr-eval

Affected ranges

Type

GIT

Repo

https://github.com/silentmatt/expr-eval

Events

Introduced

Last affected

9f40d2b0367f551bd2c07a6c7d2e06d8943cd7c3

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.2"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-12735.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.0.0"
            }
        ]
    }
]