Javascript Expression Evaluator (Silentmatt) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2025-11-14. Vendor: Silentmatt.

CVEs of Javascript Expression Evaluator

• CVE-2025-13204 - CVSS 7.3 (high), 2025-11-14: npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance…
• CVE-2025-12735 - CVSS 9.8 (critical), 2025-11-05: The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables.…