Silentmatt Javascript Expression Evaluator vulnerabilities

1 vulnerability

Known vulnerabilities in Silentmatt Javascript Expression Evaluator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-12735chainguardkibana-8.17+20
EPSS score
1.76%
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.