CVE-2025-12735
- Source
- https://cve.org/CVERecord?id=CVE-2025-12735
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-12735.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-12735
- Aliases
- Downstream
CGA (30)
- CGA-2j4c-ppwp-hxq8
- CGA-2whp-v437-8mf9
- CGA-36g4-mxvg-pvhh
- CGA-3q97-mrgx-xw8x
- CGA-6225-c4gp-699x
- CGA-7j5w-8c45-cj3x
- CGA-7mfr-6vg5-hx8r
- CGA-85h8-386j-2mg3
- CGA-87gg-6xcw-h74f
- CGA-978p-rp49-w44x
- CGA-9jr7-vqf2-3qv2
- CGA-chp5-84cj-wwrh
- CGA-fwpq-f546-cmvm
- CGA-grhf-fjjx-wccx
- CGA-j5f5-cmcf-4r39
- CGA-mv2w-fmx2-x2wp
- CGA-p4m7-rrwm-r4j6
- CGA-p8g9-mwv4-x8jx
- CGA-pm7x-h4j7-pr8f
- CGA-q3qj-4qfq-qcrw
- CGA-q697-47w4-vv39
- CGA-q96f-gqvw-x7hw
- CGA-qhg3-3p48-7xmh
- CGA-qhm3-3pqm-hw42
- CGA-r5ff-3997-hv5r
- CGA-v3cr-cj7j-56h9
- CGA-vcvg-5wcp-4xm4
- CGA-w7c9-prgf-x4hg
- CGA-w7fx-mhwq-6222
- CGA-wxrm-mwfc-98hh
CLSA (1)
MINI (8)
ROOT (1)
- Related
- Published
- 2025-11-05T00:22:55Z
- Modified
- 2026-08-12T03:51:36Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2025-12735
- Details
-
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.
- Database specific
{ "cna_assigner": "certcc", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12735.json", "unresolved_ranges": [ { "extracted_events": [ { "last_affected": "3.0.0" } ], "source": "AFFECTED_FIELD" } ] }- References
-
- https://www.kb.cert.org/vuls/id/263614
- https://www.npmjs.com/package/expr-eval
- https://www.npmjs.com/package/expr-eval-fork
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12735.json
- https://github.com/advisories/GHSA-jc85-fpwf-qm7x
- https://kb.cert.org/vuls/id/263614
- https://nvd.nist.gov/vuln/detail/CVE-2025-12735
- https://github.com/silentmatt/expr-eval/pull/288
- https://github.com/jorenbroekema/expr-eval
- https://github.com/silentmatt/expr-eval
- https://github.com/jorenbroekema/expr-eval/blob/460b820ba01c5aca6c5d84a7d4f1fa5d1913c67b/test/security.js
Affected packages
Git / github.com/silentmatt/expr-eval
Affected ranges
- Type
- GIT
- Repo
- https://github.com/silentmatt/expr-eval
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:silentmatt:javascript_expression_evaluator:*:*:*:*:*:node.js:*:*", "extracted_events": [ { "introduced": "0" }, { "last_affected": "2.0.2" } ], "source": [ "AFFECTED_FIELD", "CPE_RANGE" ] }